aboutsummaryrefslogtreecommitdiff
path: root/test/results/stats/default
diff options
context:
space:
mode:
authorToni Uhlig <matzeton@googlemail.com>2024-04-10 16:06:29 +0200
committerToni Uhlig <matzeton@googlemail.com>2024-04-10 16:06:53 +0200
commit53126a0af9341d609247ef63b494c44b33a93baf (patch)
treead619d22a8c14177651175d283b4f3705a986f22 /test/results/stats/default
parent15608bb57173a113665552f2b515e57f2e5f2fc4 (diff)
bump libnDPI to 142c8f5afb90629762920db6703831826513e00b
* fixed `git format` hash length Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'test/results/stats/default')
-rw-r--r--test/results/stats/default/1kxun.pcap.out10
-rw-r--r--test/results/stats/default/443-chrome.pcap.out2
-rw-r--r--test/results/stats/default/443-curl.pcap.out2
-rw-r--r--test/results/stats/default/443-firefox.pcap.out2
-rw-r--r--test/results/stats/default/443-git.pcap.out2
-rw-r--r--test/results/stats/default/443-opvn.pcap.out2
-rw-r--r--test/results/stats/default/443-safari.pcap.out2
-rw-r--r--test/results/stats/default/4in4tunnel.pcap.out2
-rw-r--r--test/results/stats/default/4in6tunnel.pcap.out2
-rw-r--r--test/results/stats/default/6in4tunnel.pcap.out2
-rw-r--r--test/results/stats/default/6in6tunnel.pcap.out2
-rw-r--r--test/results/stats/default/BGP_Cisco_hdlc_slarp.pcap.out2
-rw-r--r--test/results/stats/default/BGP_redist.pcap.out2
-rw-r--r--test/results/stats/default/EAQ.pcap.out2
-rw-r--r--test/results/stats/default/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out2
-rw-r--r--test/results/stats/default/IEC104.pcap.out2
-rw-r--r--test/results/stats/default/KakaoTalk_chat.pcap.out2
-rw-r--r--test/results/stats/default/KakaoTalk_talk.pcap.out2
-rw-r--r--test/results/stats/default/NTPv2.pcap.out2
-rw-r--r--test/results/stats/default/NTPv3.pcap.out2
-rw-r--r--test/results/stats/default/NTPv4.pcap.out2
-rw-r--r--test/results/stats/default/Oscar.pcap.out2
-rw-r--r--test/results/stats/default/TivoDVR.pcap.out2
-rw-r--r--test/results/stats/default/WebattackRCE.pcap.out2
-rw-r--r--test/results/stats/default/WebattackSQLinj.pcap.out2
-rw-r--r--test/results/stats/default/WebattackXSS.pcap.out2
-rw-r--r--test/results/stats/default/activision.pcap.out2
-rw-r--r--test/results/stats/default/adult_content.pcap.out2
-rw-r--r--test/results/stats/default/afp.pcap.out2
-rw-r--r--test/results/stats/default/agora-sd-rtn.pcap.out2
-rw-r--r--test/results/stats/default/ah.pcapng.out2
-rw-r--r--test/results/stats/default/ajp.pcap.out2
-rw-r--r--test/results/stats/default/alexa-app.pcapng.out2
-rw-r--r--test/results/stats/default/alicloud.pcap.out2
-rw-r--r--test/results/stats/default/among_us.pcap.out2
-rw-r--r--test/results/stats/default/amqp.pcap.out2
-rw-r--r--test/results/stats/default/android.pcap.out2
-rw-r--r--test/results/stats/default/anyconnect-vpn.pcap.out2
-rw-r--r--test/results/stats/default/anydesk.pcapng.out2
-rw-r--r--test/results/stats/default/avast.pcap.out2
-rw-r--r--test/results/stats/default/avast_securedns.pcapng.out2
-rw-r--r--test/results/stats/default/bacnet.pcap.out2
-rw-r--r--test/results/stats/default/bad-dns-traffic.pcap.out6
-rw-r--r--test/results/stats/default/badpackets.pcap.out2
-rw-r--r--test/results/stats/default/beckhoff_ads.pcapng.out2
-rw-r--r--test/results/stats/default/bets.pcapng.out2
-rw-r--r--test/results/stats/default/bfd.pcap.out2
-rw-r--r--test/results/stats/default/bitcoin.pcap.out2
-rw-r--r--test/results/stats/default/bittorrent.pcap.out2
-rw-r--r--test/results/stats/default/bittorrent_tcp_miss.pcapng.out2
-rw-r--r--test/results/stats/default/bittorrent_utp.pcap.out2
-rw-r--r--test/results/stats/default/bjnp.pcap.out2
-rw-r--r--test/results/stats/default/bot.pcap.out2
-rw-r--r--test/results/stats/default/bt-dns.pcap.out2
-rw-r--r--test/results/stats/default/bt-http.pcapng.out2
-rw-r--r--test/results/stats/default/bt_search.pcap.out2
-rw-r--r--test/results/stats/default/c1222.pcapng.out2
-rw-r--r--test/results/stats/default/cachefly.pcapng.out2
-rw-r--r--test/results/stats/default/can.pcap.out2
-rw-r--r--test/results/stats/default/capwap.pcap.out2
-rw-r--r--test/results/stats/default/capwap_data.pcapng.out2
-rw-r--r--test/results/stats/default/cassandra.pcap.out2
-rw-r--r--test/results/stats/default/ceph.pcap.out2
-rw-r--r--test/results/stats/default/check_mk_new.pcap.out2
-rw-r--r--test/results/stats/default/chrome.pcap.out2
-rw-r--r--test/results/stats/default/cip_io.pcap.out2
-rw-r--r--test/results/stats/default/citrix.pcap.out2
-rw-r--r--test/results/stats/default/cloudflare-warp.pcap.out2
-rw-r--r--test/results/stats/default/coap_mqtt.pcap.out2
-rw-r--r--test/results/stats/default/collectd.pcap.out2
-rw-r--r--test/results/stats/default/corba.pcap.out2
-rw-r--r--test/results/stats/default/cpha.pcap.out2
-rw-r--r--test/results/stats/default/crawler_false_positive.pcapng.out2
-rw-r--r--test/results/stats/default/crynet.pcap.out2
-rw-r--r--test/results/stats/default/custom_categories.pcapng.out2
-rw-r--r--test/results/stats/default/custom_risk_mask.pcapng.out2
-rw-r--r--test/results/stats/default/custom_rules_ipv6.pcapng.out2
-rw-r--r--test/results/stats/default/custom_rules_same-ip_multiple_ports.pcapng.out2
-rw-r--r--test/results/stats/default/dazn.pcapng.out2
-rw-r--r--test/results/stats/default/dcerpc.pcap.out2
-rw-r--r--test/results/stats/default/dhcp-fuzz.pcapng.out2
-rw-r--r--test/results/stats/default/diameter.pcap.out2
-rw-r--r--test/results/stats/default/discord.pcap.out2
-rw-r--r--test/results/stats/default/discord_mid_flow.pcap.out2
-rw-r--r--test/results/stats/default/dlep.pcapng.out2
-rw-r--r--test/results/stats/default/dlms.pcap.out2
-rw-r--r--test/results/stats/default/dlt_ppp.pcap.out2
-rw-r--r--test/results/stats/default/dnp3.pcap.out2
-rw-r--r--test/results/stats/default/dns-exf.pcap.out4
-rw-r--r--test/results/stats/default/dns-google-nsid.pcapng.out2
-rw-r--r--test/results/stats/default/dns-invalid-chars.pcap.out2
-rw-r--r--test/results/stats/default/dns-tunnel-iodine.pcap.out4
-rw-r--r--test/results/stats/default/dns.pcap.out2
-rw-r--r--test/results/stats/default/dns2tcp_tunnel.pcap.out2
-rw-r--r--test/results/stats/default/dns_ambiguous_names.pcap.out2
-rw-r--r--test/results/stats/default/dns_doh.pcap.out2
-rw-r--r--test/results/stats/default/dns_dot.pcap.out2
-rw-r--r--test/results/stats/default/dns_exfiltration.pcap.out2
-rw-r--r--test/results/stats/default/dns_fragmented.pcap.out2
-rw-r--r--test/results/stats/default/dns_invert_query.pcapng.out2
-rw-r--r--test/results/stats/default/dns_long_domainname.pcap.out2
-rw-r--r--test/results/stats/default/dnscrypt-v1-and-resolver-pings.pcap.out2
-rw-r--r--test/results/stats/default/dnscrypt-v2-doh.pcap.out2
-rw-r--r--test/results/stats/default/dnscrypt-v2.pcap.out2
-rw-r--r--test/results/stats/default/dnscrypt_skype_false_positive.pcapng.out2
-rw-r--r--test/results/stats/default/doh.pcapng.out2
-rw-r--r--test/results/stats/default/doq.pcapng.out2
-rw-r--r--test/results/stats/default/doq_adguard.pcapng.out2
-rw-r--r--test/results/stats/default/dos_win98_smb_netbeui.pcap.out2
-rw-r--r--test/results/stats/default/dotenv.pcap.out2
-rw-r--r--test/results/stats/default/drda_db2.pcap.out2
-rw-r--r--test/results/stats/default/dropbox.pcap.out2
-rw-r--r--test/results/stats/default/dtls.pcap.out2
-rw-r--r--test/results/stats/default/dtls2.pcap.out2
-rw-r--r--test/results/stats/default/dtls_certificate.pcapng.out2
-rw-r--r--test/results/stats/default/dtls_certificate_fragments.pcap.out2
-rw-r--r--test/results/stats/default/dtls_mid_sessions.pcapng.out2
-rw-r--r--test/results/stats/default/dtls_old_version.pcapng.out2
-rw-r--r--test/results/stats/default/dtls_session_id_and_coockie_both.pcap.out2
-rw-r--r--test/results/stats/default/edonkey.pcap.out2
-rw-r--r--test/results/stats/default/elasticsearch.pcap.out2
-rw-r--r--test/results/stats/default/elf.pcap.out169
-rw-r--r--test/results/stats/default/emotet.pcap.out6
-rw-r--r--test/results/stats/default/encrypted_sni.pcap.out2
-rw-r--r--test/results/stats/default/epicgames.pcapng.out2
-rw-r--r--test/results/stats/default/esp.pcapng.out2
-rw-r--r--test/results/stats/default/ethereum.pcap.out2
-rw-r--r--test/results/stats/default/ethernetIP.pcap.out2
-rw-r--r--test/results/stats/default/ethersbus.pcap.out2
-rw-r--r--test/results/stats/default/ethersio.pcap.out2
-rw-r--r--test/results/stats/default/exe_download.pcap.out4
-rw-r--r--test/results/stats/default/exe_download_as_png.pcap.out2
-rw-r--r--test/results/stats/default/facebook.pcap.out2
-rw-r--r--test/results/stats/default/fastcgi.pcap.out2
-rw-r--r--test/results/stats/default/fins.pcap.out2
-rw-r--r--test/results/stats/default/firefox.pcap.out2
-rw-r--r--test/results/stats/default/fix.pcap.out2
-rw-r--r--test/results/stats/default/fix2.pcap.out2
-rw-r--r--test/results/stats/default/flute.pcapng.out2
-rw-r--r--test/results/stats/default/forticlient.pcap.out2
-rw-r--r--test/results/stats/default/ftp-start-tls.pcap.out2
-rw-r--r--test/results/stats/default/ftp.pcap.out8
-rw-r--r--test/results/stats/default/ftp_failed.pcap.out2
-rw-r--r--test/results/stats/default/fuzz-2006-06-26-2594.pcap.out2
-rw-r--r--test/results/stats/default/fuzz-2006-09-29-28586.pcap.out2
-rw-r--r--test/results/stats/default/fuzz-2020-02-16-11740.pcap.out2
-rw-r--r--test/results/stats/default/fuzz-2021-06-07-c6c72a0a56.pcap.out2
-rw-r--r--test/results/stats/default/fuzz-2021-10-13.pcap.out2
-rw-r--r--test/results/stats/default/gaijin_mobile_mixed.pcap.out2
-rw-r--r--test/results/stats/default/gaijin_warthunder.pcap.out2
-rw-r--r--test/results/stats/default/gearman.pcap.out2
-rw-r--r--test/results/stats/default/geforcenow.pcapng.out2
-rw-r--r--test/results/stats/default/genshin-impact.pcap.out2
-rw-r--r--test/results/stats/default/git.pcap.out2
-rw-r--r--test/results/stats/default/gnutella.pcap.out4
-rw-r--r--test/results/stats/default/google_chat.pcapng.out2
-rw-r--r--test/results/stats/default/google_meet.pcapng.out2
-rw-r--r--test/results/stats/default/google_ssl.pcap.out2
-rw-r--r--test/results/stats/default/googledns_android10.pcap.out2
-rw-r--r--test/results/stats/default/gquic.pcap.out2
-rw-r--r--test/results/stats/default/gquic_only_from_server.pcap.out2
-rw-r--r--test/results/stats/default/gre.pcapng.out2
-rw-r--r--test/results/stats/default/gtp_c.pcap.out2
-rw-r--r--test/results/stats/default/gtp_false_positive.pcapng.out2
-rw-r--r--test/results/stats/default/gtp_prime.pcapng.out2
-rw-r--r--test/results/stats/default/h323-overflow.pcap.out2
-rw-r--r--test/results/stats/default/h323.pcap.out2
-rw-r--r--test/results/stats/default/h323_tcp.pcap.out2
-rw-r--r--test/results/stats/default/haproxy.pcap.out2
-rw-r--r--test/results/stats/default/hart_ip.pcap.out2
-rw-r--r--test/results/stats/default/heuristic_tcp_ack_payload.pcap.out2
-rw-r--r--test/results/stats/default/hislip.pcap.out2
-rw-r--r--test/results/stats/default/hl7.pcap.out2
-rw-r--r--test/results/stats/default/hots.pcapng.out2
-rw-r--r--test/results/stats/default/hpvirtgrp.pcap.out2
-rw-r--r--test/results/stats/default/hsrp0.pcap.out2
-rw-r--r--test/results/stats/default/hsrp2.pcap.out2
-rw-r--r--test/results/stats/default/hsrp2_ipv6.pcapng.out2
-rw-r--r--test/results/stats/default/http-crash-content-disposition.pcap.out2
-rw-r--r--test/results/stats/default/http-lines-split.pcap.out2
-rw-r--r--test/results/stats/default/http-manipulated.pcap.out2
-rw-r--r--test/results/stats/default/http-proxy.pcapng.out2
-rw-r--r--test/results/stats/default/http.pcapng.out2
-rw-r--r--test/results/stats/default/http2.pcapng.out2
-rw-r--r--test/results/stats/default/http_asymmetric.pcapng.out2
-rw-r--r--test/results/stats/default/http_auth.pcap.out2
-rw-r--r--test/results/stats/default/http_connect.pcap.out2
-rw-r--r--test/results/stats/default/http_guessed_host_and_guessed.pcapng.out2
-rw-r--r--test/results/stats/default/http_invalid_server.pcap.out2
-rw-r--r--test/results/stats/default/http_ipv6.pcap.out2
-rw-r--r--test/results/stats/default/http_on_sip_port.pcap.out2
-rw-r--r--test/results/stats/default/http_origin_different_than_host.pcap.out2
-rw-r--r--test/results/stats/default/http_starting_with_reply.pcapng.out2
-rw-r--r--test/results/stats/default/http_ua_splitted_in_two_pkts.pcapng.out2
-rw-r--r--test/results/stats/default/i3d.pcap.out2
-rw-r--r--test/results/stats/default/iax.pcap.out2
-rw-r--r--test/results/stats/default/icmp-tunnel.pcap.out2
-rw-r--r--test/results/stats/default/iec60780-5-104.pcap.out2
-rw-r--r--test/results/stats/default/ieee_c37118.pcap.out2
-rw-r--r--test/results/stats/default/imap-starttls.pcap.out2
-rw-r--r--test/results/stats/default/imap.pcap.out2
-rw-r--r--test/results/stats/default/imaps.pcap.out2
-rw-r--r--test/results/stats/default/imo.pcap.out2
-rw-r--r--test/results/stats/default/instagram.pcap.out2
-rw-r--r--test/results/stats/default/ip_fragmented_garbage.pcap.out2
-rw-r--r--test/results/stats/default/iphone.pcap.out2
-rw-r--r--test/results/stats/default/ipp.pcap.out2
-rw-r--r--test/results/stats/default/ipsec_isakmp_esp.pcap.out2
-rw-r--r--test/results/stats/default/ipv6_in_gtp.pcap.out2
-rw-r--r--test/results/stats/default/irc.pcap.out2
-rw-r--r--test/results/stats/default/iso9506-1-mms.pcap.out2
-rw-r--r--test/results/stats/default/ja3_lots_of_cipher_suites.pcap.out2
-rw-r--r--test/results/stats/default/ja3_lots_of_cipher_suites_2_anon.pcap.out2
-rw-r--r--test/results/stats/default/jabber.pcap.out2
-rw-r--r--test/results/stats/default/jsonrpc.pcap.out2
-rw-r--r--test/results/stats/default/kafka.pcapng.out2
-rw-r--r--test/results/stats/default/kcp.pcap.out2
-rw-r--r--test/results/stats/default/kerberos-error.pcap.out2
-rw-r--r--test/results/stats/default/kerberos-login.pcap.out2
-rw-r--r--test/results/stats/default/kerberos.pcap.out2
-rw-r--r--test/results/stats/default/kerberos_fuzz.pcapng.out2
-rw-r--r--test/results/stats/default/kismet.pcap.out2
-rw-r--r--test/results/stats/default/kontiki.pcap.out2
-rw-r--r--test/results/stats/default/line.pcap.out2
-rw-r--r--test/results/stats/default/linecall_falsepositve.pcap.out2
-rw-r--r--test/results/stats/default/lisp_registration.pcap.out2
-rw-r--r--test/results/stats/default/log4j-webapp-exploit.pcap.out2
-rw-r--r--test/results/stats/default/lol_wild_rift_udp.pcap.out2
-rw-r--r--test/results/stats/default/long_tls_certificate.pcap.out2
-rw-r--r--test/results/stats/default/lru_ipv6_caches.pcapng.out12
-rw-r--r--test/results/stats/default/malformed_dns.pcap.out2
-rw-r--r--test/results/stats/default/malformed_icmp.pcap.out2
-rw-r--r--test/results/stats/default/malware.pcap.out2
-rw-r--r--test/results/stats/default/memcached.cap.out2
-rw-r--r--test/results/stats/default/merakicloud.pcapng.out2
-rw-r--r--test/results/stats/default/mgcp.pcap.out2
-rw-r--r--test/results/stats/default/mining.pcapng.out2
-rw-r--r--test/results/stats/default/modbus.pcap.out2
-rw-r--r--test/results/stats/default/monero.pcap.out2
-rw-r--r--test/results/stats/default/mongo_false_positive.pcapng.out2
-rw-r--r--test/results/stats/default/mongodb.pcap.out2
-rw-r--r--test/results/stats/default/mpeg-dash.pcap.out2
-rw-r--r--test/results/stats/default/mpeg.pcap.out2
-rw-r--r--test/results/stats/default/mpegts.pcap.out2
-rw-r--r--test/results/stats/default/mqtt.pcap.out2
-rw-r--r--test/results/stats/default/mssql_tds.pcap.out2
-rw-r--r--test/results/stats/default/mullvad_dns.pcap.out2
-rw-r--r--test/results/stats/default/mullvad_wireguard.pcap.out2
-rw-r--r--test/results/stats/default/mumble.pcapng.out2
-rw-r--r--test/results/stats/default/munin.pcap.out2
-rw-r--r--test/results/stats/default/mysql.pcapng.out2
-rw-r--r--test/results/stats/default/natpmp.pcap.out2
-rw-r--r--test/results/stats/default/nats.pcap.out2
-rw-r--r--test/results/stats/default/ndpi_match_string_subprotocol__error.pcapng.out2
-rw-r--r--test/results/stats/default/nest_log_sink.pcap.out2
-rw-r--r--test/results/stats/default/netbios.pcap.out2
-rw-r--r--test/results/stats/default/netbios_wildcard_dns_query.pcap.out2
-rw-r--r--test/results/stats/default/netease_games.pcapng.out2
-rw-r--r--test/results/stats/default/netflix.pcap.out10
-rw-r--r--test/results/stats/default/netflow-fritz.pcap.out2
-rw-r--r--test/results/stats/default/netflowv9.pcap.out2
-rw-r--r--test/results/stats/default/nfsv2.pcap.out2
-rw-r--r--test/results/stats/default/nfsv3.pcap.out2
-rw-r--r--test/results/stats/default/nintendo.pcap.out2
-rw-r--r--test/results/stats/default/nntp.pcap.out2
-rw-r--r--test/results/stats/default/no_sni.pcap.out2
-rw-r--r--test/results/stats/default/nomachine.pcapng.out2
-rw-r--r--test/results/stats/default/ocs.pcap.out2
-rw-r--r--test/results/stats/default/ocsp.pcapng.out2
-rw-r--r--test/results/stats/default/oicq.pcap.out2
-rw-r--r--test/results/stats/default/ookla.pcap.out2
-rw-r--r--test/results/stats/default/opc-ua.pcap.out2
-rw-r--r--test/results/stats/default/openflow.pcap.out2
-rw-r--r--test/results/stats/default/openvpn-tlscrypt.pcap.out2
-rw-r--r--test/results/stats/default/openvpn.pcap.out2
-rw-r--r--test/results/stats/default/openvpn_nohmac.pcapng.out2
-rw-r--r--test/results/stats/default/openvpn_nohmac_tcp.pcapng.out2
-rw-r--r--test/results/stats/default/opera-vpn.pcapng.out2
-rw-r--r--test/results/stats/default/oracle12.pcapng.out2
-rw-r--r--test/results/stats/default/os_detected.pcapng.out2
-rw-r--r--test/results/stats/default/ospfv2_add_new_prefix.pcap.out2
-rw-r--r--test/results/stats/default/ossfuzz_seed_fake_traces_1.pcapng.out2
-rw-r--r--test/results/stats/default/ossfuzz_seed_fake_traces_2.pcapng.out2
-rw-r--r--test/results/stats/default/ossfuzz_seed_fake_traces_3.pcapng.out2
-rw-r--r--test/results/stats/default/ossfuzz_seed_fake_traces_4.pcapng.out2
-rw-r--r--test/results/stats/default/path_of_exile.pcapng.out2
-rw-r--r--test/results/stats/default/pfcp.pcapng.out2
-rw-r--r--test/results/stats/default/pgm.pcap.out2
-rw-r--r--test/results/stats/default/pgsql.pcap.out2
-rw-r--r--test/results/stats/default/pia.pcap.out2
-rw-r--r--test/results/stats/default/pim.pcap.out2
-rw-r--r--test/results/stats/default/pinterest.pcap.out2
-rw-r--r--test/results/stats/default/pluralsight.pcap.out2
-rw-r--r--test/results/stats/default/pop3.pcap.out2
-rw-r--r--test/results/stats/default/pop3_stls.pcap.out2
-rw-r--r--test/results/stats/default/pops.pcapng.out2
-rw-r--r--test/results/stats/default/portable_executable.pcap.out169
-rw-r--r--test/results/stats/default/pps.pcap.out12
-rw-r--r--test/results/stats/default/pptp.pcap.out2
-rw-r--r--test/results/stats/default/profinet-io-le.pcap.out2
-rw-r--r--test/results/stats/default/protobuf.pcap.out2
-rw-r--r--test/results/stats/default/protonvpn.pcap.out2
-rw-r--r--test/results/stats/default/psiphon3.pcap.out2
-rw-r--r--test/results/stats/default/ptpv2.pcap.out2
-rw-r--r--test/results/stats/default/punycode-idn.pcap.out2
-rw-r--r--test/results/stats/default/quic-23.pcap.out2
-rw-r--r--test/results/stats/default/quic-24.pcap.out2
-rw-r--r--test/results/stats/default/quic-27.pcap.out2
-rw-r--r--test/results/stats/default/quic-28.pcap.out2
-rw-r--r--test/results/stats/default/quic-29.pcap.out2
-rw-r--r--test/results/stats/default/quic-33.pcapng.out2
-rw-r--r--test/results/stats/default/quic-34.pcap.out2
-rw-r--r--test/results/stats/default/quic-forcing-vn-with-data.pcapng.out2
-rw-r--r--test/results/stats/default/quic-fuzz-overflow.pcapng.out2
-rw-r--r--test/results/stats/default/quic-mvfst-22.pcap.out2
-rw-r--r--test/results/stats/default/quic-mvfst-22_decryption_error.pcap.out2
-rw-r--r--test/results/stats/default/quic-mvfst-27.pcapng.out2
-rw-r--r--test/results/stats/default/quic-mvfst-exp.pcap.out2
-rw-r--r--test/results/stats/default/quic-v2.pcapng.out2
-rw-r--r--test/results/stats/default/quic.pcap.out2
-rw-r--r--test/results/stats/default/quic046.pcap.out2
-rw-r--r--test/results/stats/default/quic_0RTT.pcap.out2
-rw-r--r--test/results/stats/default/quic_cc_ack.pcapng.out2
-rw-r--r--test/results/stats/default/quic_crypto_aes_auth_size.pcap.out2
-rw-r--r--test/results/stats/default/quic_frags_ch_in_multiple_packets.pcapng.out2
-rw-r--r--test/results/stats/default/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out2
-rw-r--r--test/results/stats/default/quic_frags_different_dcid.pcapng.out2
-rw-r--r--test/results/stats/default/quic_interop_V.pcapng.out2
-rw-r--r--test/results/stats/default/quic_q39.pcap.out2
-rw-r--r--test/results/stats/default/quic_q43.pcap.out2
-rw-r--r--test/results/stats/default/quic_q46.pcap.out2
-rw-r--r--test/results/stats/default/quic_q46_b.pcap.out2
-rw-r--r--test/results/stats/default/quic_q50.pcap.out2
-rw-r--r--test/results/stats/default/quic_t50.pcap.out2
-rw-r--r--test/results/stats/default/quic_t51.pcap.out2
-rw-r--r--test/results/stats/default/quickplay.pcap.out10
-rw-r--r--test/results/stats/default/radius_false_positive.pcapng.out2
-rw-r--r--test/results/stats/default/radmin3.pcapng.out2
-rw-r--r--test/results/stats/default/raft.pcap.out2
-rw-r--r--test/results/stats/default/raknet.pcap.out2
-rw-r--r--test/results/stats/default/rdp.pcap.out2
-rw-r--r--test/results/stats/default/rdp2.pcap.out2
-rw-r--r--test/results/stats/default/rdp3.pcap.out2
-rw-r--r--test/results/stats/default/reasm_crash_anon.pcapng.out2
-rw-r--r--test/results/stats/default/reasm_segv_anon.pcapng.out2
-rw-r--r--test/results/stats/default/reddit.pcap.out2
-rw-r--r--test/results/stats/default/resp.pcap.out2
-rw-r--r--test/results/stats/default/riot.pcapng.out2
-rw-r--r--test/results/stats/default/riotgames.pcap.out2
-rw-r--r--test/results/stats/default/rmcp.pcap.out2
-rw-r--r--test/results/stats/default/roblox.pcapng.out2
-rw-r--r--test/results/stats/default/roughtime.pcap.out2
-rw-r--r--test/results/stats/default/rsh-syslog-false-positive.pcap.out2
-rw-r--r--test/results/stats/default/rsh.pcap.out2
-rw-r--r--test/results/stats/default/rsync.pcap.out2
-rw-r--r--test/results/stats/default/rtcp_multiple_pkts_in_the_same_datagram.pcap.out2
-rw-r--r--test/results/stats/default/rtmp.pcap.out2
-rw-r--r--test/results/stats/default/rtp.pcapng.out2
-rw-r--r--test/results/stats/default/rtps.pcap.out2
-rw-r--r--test/results/stats/default/rtsp.pcap.out2
-rw-r--r--test/results/stats/default/rtsp_setup_http.pcapng.out2
-rw-r--r--test/results/stats/default/rx.pcap.out2
-rw-r--r--test/results/stats/default/s7comm-plus.pcap.out2
-rw-r--r--test/results/stats/default/s7comm.pcap.out2
-rw-r--r--test/results/stats/default/safari.pcap.out2
-rw-r--r--test/results/stats/default/salesforce.pcap.out2
-rw-r--r--test/results/stats/default/sccp_hw_conf_register.pcapng.out2
-rw-r--r--test/results/stats/default/sctp.cap.out2
-rw-r--r--test/results/stats/default/selfsigned.pcap.out2
-rw-r--r--test/results/stats/default/sflow.pcap.out2
-rw-r--r--test/results/stats/default/shadowsocks.pcap.out2
-rw-r--r--test/results/stats/default/shell.pcap.out169
-rw-r--r--test/results/stats/default/signal.pcap.out2
-rw-r--r--test/results/stats/default/simple-dnscrypt.pcap.out2
-rw-r--r--test/results/stats/default/sip.pcap.out2
-rw-r--r--test/results/stats/default/sip_hello.pcapng.out2
-rw-r--r--test/results/stats/default/sites.pcapng.out2
-rw-r--r--test/results/stats/default/skinny.pcap.out2
-rw-r--r--test/results/stats/default/skype-conference-call.pcap.out2
-rw-r--r--test/results/stats/default/smb_deletefile.pcap.out2
-rw-r--r--test/results/stats/default/smb_frags.pcap.out2
-rw-r--r--test/results/stats/default/smbv1.pcap.out2
-rw-r--r--test/results/stats/default/smpp_in_general.pcap.out2
-rw-r--r--test/results/stats/default/smtp-starttls.pcap.out2
-rw-r--r--test/results/stats/default/smtp.pcap.out2
-rw-r--r--test/results/stats/default/smtps.pcapng.out2
-rw-r--r--test/results/stats/default/snapchat.pcap.out2
-rw-r--r--test/results/stats/default/snapchat_call.pcapng.out2
-rw-r--r--test/results/stats/default/snapchat_call_v1.pcapng.out2
-rw-r--r--test/results/stats/default/snmp.pcap.out2
-rw-r--r--test/results/stats/default/soap.pcap.out2
-rw-r--r--test/results/stats/default/socks.pcap.out2
-rw-r--r--test/results/stats/default/softether.pcap.out2
-rw-r--r--test/results/stats/default/someip-tp.pcap.out2
-rw-r--r--test/results/stats/default/someip-udp-method-call.pcapng.out2
-rw-r--r--test/results/stats/default/someip_sd_sample.pcap.out2
-rw-r--r--test/results/stats/default/source_engine.pcap.out2
-rw-r--r--test/results/stats/default/spotify_tcp.pcap.out2
-rw-r--r--test/results/stats/default/sql_injection.pcap.out2
-rw-r--r--test/results/stats/default/srvloc-v1.pcapng.out2
-rw-r--r--test/results/stats/default/srvloc.pcap.out2
-rw-r--r--test/results/stats/default/ssdp-m-search-ua.pcap.out2
-rw-r--r--test/results/stats/default/ssdp-m-search.pcap.out2
-rw-r--r--test/results/stats/default/ssh.pcap.out2
-rw-r--r--test/results/stats/default/ssl-cert-name-mismatch.pcap.out2
-rw-r--r--test/results/stats/default/starcraft_battle.pcap.out10
-rw-r--r--test/results/stats/default/steam.pcapng.out2
-rw-r--r--test/results/stats/default/stomp.pcapng.out2
-rw-r--r--test/results/stats/default/stun.pcap.out2
-rw-r--r--test/results/stats/default/stun_classic.pcap.out2
-rw-r--r--test/results/stats/default/stun_dtls_rtp.pcapng.out2
-rw-r--r--test/results/stats/default/stun_dtls_rtp_unidir.pcapng.out2
-rw-r--r--test/results/stats/default/stun_dtls_unidirectional_client.pcap.out2
-rw-r--r--test/results/stats/default/stun_dtls_unidirectional_server.pcap.out2
-rw-r--r--test/results/stats/default/stun_google_meet.pcapng.out2
-rw-r--r--test/results/stats/default/stun_msteams_unidir.pcapng.out2
-rw-r--r--test/results/stats/default/stun_signal.pcapng.out16
-rw-r--r--test/results/stats/default/stun_tcp_multiple_msgs_same_pkt.pcap.out2
-rw-r--r--test/results/stats/default/stun_wa_call.pcapng.out14
-rw-r--r--test/results/stats/default/stun_zoom.pcapng.out2
-rw-r--r--test/results/stats/default/syncthing.pcap.out2
-rw-r--r--test/results/stats/default/synscan.pcap.out2
-rw-r--r--test/results/stats/default/syslog.pcap.out2
-rw-r--r--test/results/stats/default/tailscale.pcap.out2
-rw-r--r--test/results/stats/default/targusdataspeed_false_positives.pcap.out2
-rw-r--r--test/results/stats/default/tcp_scan.pcapng.out2
-rw-r--r--test/results/stats/default/teams.pcap.out16
-rw-r--r--test/results/stats/default/teamspeak3.pcap.out2
-rw-r--r--test/results/stats/default/teamviewer.pcap.out2
-rw-r--r--test/results/stats/default/telegram.pcap.out2
-rw-r--r--test/results/stats/default/telegram_videocall.pcapng.out10
-rw-r--r--test/results/stats/default/telnet.pcap.out2
-rw-r--r--test/results/stats/default/tencent_games.pcap.out2
-rw-r--r--test/results/stats/default/teredo.pcap.out2
-rw-r--r--test/results/stats/default/tftp.pcap.out2
-rw-r--r--test/results/stats/default/threema.pcap.out2
-rw-r--r--test/results/stats/default/thrift.pcap.out2
-rw-r--r--test/results/stats/default/tinc.pcap.out2
-rw-r--r--test/results/stats/default/tk.pcap.out2
-rw-r--r--test/results/stats/default/tls-appdata.pcap.out2
-rw-r--r--test/results/stats/default/tls-esni-fuzzed.pcap.out2
-rw-r--r--test/results/stats/default/tls-rdn-extract.pcap.out2
-rw-r--r--test/results/stats/default/tls_2_reasms.pcapng.out2
-rw-r--r--test/results/stats/default/tls_2_reasms_b.pcapng.out2
-rw-r--r--test/results/stats/default/tls_alert.pcap.out2
-rw-r--r--test/results/stats/default/tls_certificate_too_long.pcap.out6
-rw-r--r--test/results/stats/default/tls_cipher_lens.pcap.out2
-rw-r--r--test/results/stats/default/tls_client_certificate_with_missing_server_one.pcapng.out2
-rw-r--r--test/results/stats/default/tls_ech.pcapng.out2
-rw-r--r--test/results/stats/default/tls_esni_sni_both.pcap.out2
-rw-r--r--test/results/stats/default/tls_false_positives.pcapng.out2
-rw-r--r--test/results/stats/default/tls_invalid_reads.pcap.out2
-rw-r--r--test/results/stats/default/tls_long_cert.pcap.out2
-rw-r--r--test/results/stats/default/tls_malicious_sha1.pcapng.out2
-rw-r--r--test/results/stats/default/tls_missing_ch_frag.pcap.out2
-rw-r--r--test/results/stats/default/tls_multiple_synack_different_seq.pcapng.out2
-rw-r--r--test/results/stats/default/tls_port_80.pcapng.out2
-rw-r--r--test/results/stats/default/tls_torrent.pcapng.out2
-rw-r--r--test/results/stats/default/tls_unidirectional.pcap.out2
-rw-r--r--test/results/stats/default/tls_verylong_certificate.pcap.out2
-rw-r--r--test/results/stats/default/toca-boca.pcap.out2
-rw-r--r--test/results/stats/default/tor.pcap.out2
-rw-r--r--test/results/stats/default/tplink_shp.pcap.out2
-rw-r--r--test/results/stats/default/trickbot.pcap.out2
-rw-r--r--test/results/stats/default/tumblr.pcap.out2
-rw-r--r--test/results/stats/default/tunnelbear.pcap.out2
-rw-r--r--test/results/stats/default/tuya_lp.pcap.out2
-rw-r--r--test/results/stats/default/ubntac2.pcap.out2
-rw-r--r--test/results/stats/default/uftp_v4_v5.pcap.out2
-rw-r--r--test/results/stats/default/ultrasurf.pcap.out2
-rw-r--r--test/results/stats/default/umas.pcap.out2
-rw-r--r--test/results/stats/default/upnp.pcap.out2
-rw-r--r--test/results/stats/default/viber.pcap.out2
-rw-r--r--test/results/stats/default/vk.pcapng.out2
-rw-r--r--test/results/stats/default/vnc.pcap.out2
-rw-r--r--test/results/stats/default/vrrp3.pcapng.out2
-rw-r--r--test/results/stats/default/vxlan.pcap.out2
-rw-r--r--test/results/stats/default/wa_video.pcap.out14
-rw-r--r--test/results/stats/default/wa_voice.pcap.out14
-rw-r--r--test/results/stats/default/waze.pcap.out10
-rw-r--r--test/results/stats/default/webdav.pcap.out2
-rw-r--r--test/results/stats/default/webex.pcap.out2
-rw-r--r--test/results/stats/default/websocket.pcap.out2
-rw-r--r--test/results/stats/default/wechat.pcap.out2
-rw-r--r--test/results/stats/default/weibo.pcap.out2
-rw-r--r--test/results/stats/default/whatsapp.pcap.out2
-rw-r--r--test/results/stats/default/whatsapp_login_call.pcap.out14
-rw-r--r--test/results/stats/default/whatsapp_login_chat.pcap.out2
-rw-r--r--test/results/stats/default/whatsapp_voice_and_message.pcap.out2
-rw-r--r--test/results/stats/default/whatsappfiles.pcap.out2
-rw-r--r--test/results/stats/default/whois.pcapng.out2
-rw-r--r--test/results/stats/default/windowsupdate_over_http.pcap.out10
-rw-r--r--test/results/stats/default/wireguard.pcap.out2
-rw-r--r--test/results/stats/default/wow.pcap.out2
-rw-r--r--test/results/stats/default/xdmcp.pcap.out2
-rw-r--r--test/results/stats/default/xiaomi.pcap.out2
-rw-r--r--test/results/stats/default/xss.pcap.out2
-rw-r--r--test/results/stats/default/yandex.pcapng.out2
-rw-r--r--test/results/stats/default/yojimbo.pcap.out2
-rw-r--r--test/results/stats/default/youtube_quic.pcap.out2
-rw-r--r--test/results/stats/default/youtubeupload.pcap.out2
-rw-r--r--test/results/stats/default/z3950.pcapng.out2
-rw-r--r--test/results/stats/default/zabbix.pcap.out2
-rw-r--r--test/results/stats/default/zattoo.pcap.out2
-rw-r--r--test/results/stats/default/zoom.pcap.out2
-rw-r--r--test/results/stats/default/zoom2.pcap.out2
-rw-r--r--test/results/stats/default/zoom_p2p.pcapng.out2
507 files changed, 1100 insertions, 593 deletions
diff --git a/test/results/stats/default/1kxun.pcap.out b/test/results/stats/default/1kxun.pcap.out
index 578dd3e64..9e5431def 100644
--- a/test/results/stats/default/1kxun.pcap.out
+++ b/test/results/stats/default/1kxun.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:1303
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:1542796
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:1542944
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:197
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:188
@@ -95,9 +95,9 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:34
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:5
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
@@ -116,7 +116,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:14
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:1
diff --git a/test/results/stats/default/443-chrome.pcap.out b/test/results/stats/default/443-chrome.pcap.out
index 3ac961da3..81d64de20 100644
--- a/test/results/stats/default/443-chrome.pcap.out
+++ b/test/results/stats/default/443-chrome.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7032
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7129
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/443-curl.pcap.out b/test/results/stats/default/443-curl.pcap.out
index ef644e459..c7c989a92 100644
--- a/test/results/stats/default/443-curl.pcap.out
+++ b/test/results/stats/default/443-curl.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13192
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13186
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/443-firefox.pcap.out b/test/results/stats/default/443-firefox.pcap.out
index c38fd214d..52dd75ce5 100644
--- a/test/results/stats/default/443-firefox.pcap.out
+++ b/test/results/stats/default/443-firefox.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13440
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13434
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/443-git.pcap.out b/test/results/stats/default/443-git.pcap.out
index 187b08772..f53648ae6 100644
--- a/test/results/stats/default/443-git.pcap.out
+++ b/test/results/stats/default/443-git.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15245
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15239
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/443-opvn.pcap.out b/test/results/stats/default/443-opvn.pcap.out
index 48c90b43c..1aa6b04f9 100644
--- a/test/results/stats/default/443-opvn.pcap.out
+++ b/test/results/stats/default/443-opvn.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9624
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9618
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/443-safari.pcap.out b/test/results/stats/default/443-safari.pcap.out
index dc1533545..e36c1eced 100644
--- a/test/results/stats/default/443-safari.pcap.out
+++ b/test/results/stats/default/443-safari.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12951
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12945
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/4in4tunnel.pcap.out b/test/results/stats/default/4in4tunnel.pcap.out
index 84bbf0a42..e0ee8f401 100644
--- a/test/results/stats/default/4in4tunnel.pcap.out
+++ b/test/results/stats/default/4in4tunnel.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:17
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8627
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8613
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/4in6tunnel.pcap.out b/test/results/stats/default/4in6tunnel.pcap.out
index b340cdd53..ee14865e2 100644
--- a/test/results/stats/default/4in6tunnel.pcap.out
+++ b/test/results/stats/default/4in6tunnel.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9401
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9395
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/6in4tunnel.pcap.out b/test/results/stats/default/6in4tunnel.pcap.out
index 49ce318c8..cbff24721 100644
--- a/test/results/stats/default/6in4tunnel.pcap.out
+++ b/test/results/stats/default/6in4tunnel.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9752
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9746
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/6in6tunnel.pcap.out b/test/results/stats/default/6in6tunnel.pcap.out
index 2eb03bffb..3cfb69171 100644
--- a/test/results/stats/default/6in6tunnel.pcap.out
+++ b/test/results/stats/default/6in6tunnel.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8148
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8142
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/BGP_Cisco_hdlc_slarp.pcap.out b/test/results/stats/default/BGP_Cisco_hdlc_slarp.pcap.out
index 31c51fbf0..e65cd6caa 100644
--- a/test/results/stats/default/BGP_Cisco_hdlc_slarp.pcap.out
+++ b/test/results/stats/default/BGP_Cisco_hdlc_slarp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7392
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7386
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/BGP_redist.pcap.out b/test/results/stats/default/BGP_redist.pcap.out
index dac80d053..555e4cb5d 100644
--- a/test/results/stats/default/BGP_redist.pcap.out
+++ b/test/results/stats/default/BGP_redist.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:9
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6102
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6096
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/EAQ.pcap.out b/test/results/stats/default/EAQ.pcap.out
index 871c175d1..4b31f91dc 100644
--- a/test/results/stats/default/EAQ.pcap.out
+++ b/test/results/stats/default/EAQ.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:269
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:193281
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:193275
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:31
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:29
diff --git a/test/results/stats/default/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out b/test/results/stats/default/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out
index ab690873e..77ad3b6df 100644
--- a/test/results/stats/default/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out
+++ b/test/results/stats/default/FAX-Call-t38-CA-TDM-SIP-FB-1.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:52
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:54935
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:54929
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/IEC104.pcap.out b/test/results/stats/default/IEC104.pcap.out
index 822fb1af0..a4ad4dd60 100644
--- a/test/results/stats/default/IEC104.pcap.out
+++ b/test/results/stats/default/IEC104.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:17
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12102
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12096
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/KakaoTalk_chat.pcap.out b/test/results/stats/default/KakaoTalk_chat.pcap.out
index f1b521f6a..33a34654a 100644
--- a/test/results/stats/default/KakaoTalk_chat.pcap.out
+++ b/test/results/stats/default/KakaoTalk_chat.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:270
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:238298
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:238410
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:38
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:30
diff --git a/test/results/stats/default/KakaoTalk_talk.pcap.out b/test/results/stats/default/KakaoTalk_talk.pcap.out
index 608fe79bb..198e980be 100644
--- a/test/results/stats/default/KakaoTalk_talk.pcap.out
+++ b/test/results/stats/default/KakaoTalk_talk.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:144
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:120158
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:120270
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:20
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:14
diff --git a/test/results/stats/default/NTPv2.pcap.out b/test/results/stats/default/NTPv2.pcap.out
index 689eea2e5..4f26ceed6 100644
--- a/test/results/stats/default/NTPv2.pcap.out
+++ b/test/results/stats/default/NTPv2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5570
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5564
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/NTPv3.pcap.out b/test/results/stats/default/NTPv3.pcap.out
index 079d2a4f9..27e69a54e 100644
--- a/test/results/stats/default/NTPv3.pcap.out
+++ b/test/results/stats/default/NTPv3.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5130
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5124
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/NTPv4.pcap.out b/test/results/stats/default/NTPv4.pcap.out
index 079d2a4f9..27e69a54e 100644
--- a/test/results/stats/default/NTPv4.pcap.out
+++ b/test/results/stats/default/NTPv4.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5130
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5124
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/Oscar.pcap.out b/test/results/stats/default/Oscar.pcap.out
index e174d9cda..9ded01d52 100644
--- a/test/results/stats/default/Oscar.pcap.out
+++ b/test/results/stats/default/Oscar.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9662
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9656
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/TivoDVR.pcap.out b/test/results/stats/default/TivoDVR.pcap.out
index ac806e262..94368e460 100644
--- a/test/results/stats/default/TivoDVR.pcap.out
+++ b/test/results/stats/default/TivoDVR.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6243
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6237
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/WebattackRCE.pcap.out b/test/results/stats/default/WebattackRCE.pcap.out
index 61f9c1379..5542501d2 100644
--- a/test/results/stats/default/WebattackRCE.pcap.out
+++ b/test/results/stats/default/WebattackRCE.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:3191
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:3379261
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:3379255
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:797
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:797
diff --git a/test/results/stats/default/WebattackSQLinj.pcap.out b/test/results/stats/default/WebattackSQLinj.pcap.out
index 57f3b4457..789b230ad 100644
--- a/test/results/stats/default/WebattackSQLinj.pcap.out
+++ b/test/results/stats/default/WebattackSQLinj.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:75
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:65864
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:65858
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/WebattackXSS.pcap.out b/test/results/stats/default/WebattackXSS.pcap.out
index 002f9d86b..2364f5a54 100644
--- a/test/results/stats/default/WebattackXSS.pcap.out
+++ b/test/results/stats/default/WebattackXSS.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:5305
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:3632325
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:3632317
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:661
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:657
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/activision.pcap.out b/test/results/stats/default/activision.pcap.out
index ee6df4a51..d6fcf597e 100644
--- a/test/results/stats/default/activision.pcap.out
+++ b/test/results/stats/default/activision.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:38
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26037
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26027
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/adult_content.pcap.out b/test/results/stats/default/adult_content.pcap.out
index da06885c1..ad6b36bb1 100644
--- a/test/results/stats/default/adult_content.pcap.out
+++ b/test/results/stats/default/adult_content.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9102
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9096
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/afp.pcap.out b/test/results/stats/default/afp.pcap.out
index 6040b6f7d..63ffd72d2 100644
--- a/test/results/stats/default/afp.pcap.out
+++ b/test/results/stats/default/afp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7386
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7380
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/agora-sd-rtn.pcap.out b/test/results/stats/default/agora-sd-rtn.pcap.out
index c2f7376e7..b469924ec 100644
--- a/test/results/stats/default/agora-sd-rtn.pcap.out
+++ b/test/results/stats/default/agora-sd-rtn.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:238
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:225892
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:225878
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:26
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:26
diff --git a/test/results/stats/default/ah.pcapng.out b/test/results/stats/default/ah.pcapng.out
index 7731f5530..4f43ecd11 100644
--- a/test/results/stats/default/ah.pcapng.out
+++ b/test/results/stats/default/ah.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12175
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12169
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/ajp.pcap.out b/test/results/stats/default/ajp.pcap.out
index 860287ce7..260697f4c 100644
--- a/test/results/stats/default/ajp.pcap.out
+++ b/test/results/stats/default/ajp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:43
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:23823
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:23817
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/alexa-app.pcapng.out b/test/results/stats/default/alexa-app.pcapng.out
index 2c0187bed..2747db7d2 100644
--- a/test/results/stats/default/alexa-app.pcapng.out
+++ b/test/results/stats/default/alexa-app.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:1415
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:1268458
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:1268452
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:160
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:104
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:56
diff --git a/test/results/stats/default/alicloud.pcap.out b/test/results/stats/default/alicloud.pcap.out
index e1c574bd8..cd552481f 100644
--- a/test/results/stats/default/alicloud.pcap.out
+++ b/test/results/stats/default/alicloud.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:135
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:92461
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:92431
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:15
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:15
diff --git a/test/results/stats/default/among_us.pcap.out b/test/results/stats/default/among_us.pcap.out
index c6fad6daa..d2d8c612c 100644
--- a/test/results/stats/default/among_us.pcap.out
+++ b/test/results/stats/default/among_us.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5054
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5048
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/amqp.pcap.out b/test/results/stats/default/amqp.pcap.out
index ac23898d7..a69745257 100644
--- a/test/results/stats/default/amqp.pcap.out
+++ b/test/results/stats/default/amqp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:28
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:23195
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:23189
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/android.pcap.out b/test/results/stats/default/android.pcap.out
index 71088cbb1..aae572ea8 100644
--- a/test/results/stats/default/android.pcap.out
+++ b/test/results/stats/default/android.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:437
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:374406
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:374400
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:63
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:54
diff --git a/test/results/stats/default/anyconnect-vpn.pcap.out b/test/results/stats/default/anyconnect-vpn.pcap.out
index fa54ac35d..f8205582f 100644
--- a/test/results/stats/default/anyconnect-vpn.pcap.out
+++ b/test/results/stats/default/anyconnect-vpn.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:457
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:385180
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:385174
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:69
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:59
diff --git a/test/results/stats/default/anydesk.pcapng.out b/test/results/stats/default/anydesk.pcapng.out
index bd62e0483..1471815f4 100644
--- a/test/results/stats/default/anydesk.pcapng.out
+++ b/test/results/stats/default/anydesk.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:66
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:65342
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:65332
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/avast.pcap.out b/test/results/stats/default/avast.pcap.out
index bd77c3a0a..f166a6ff3 100644
--- a/test/results/stats/default/avast.pcap.out
+++ b/test/results/stats/default/avast.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:101
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:68518
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:68476
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:8
diff --git a/test/results/stats/default/avast_securedns.pcapng.out b/test/results/stats/default/avast_securedns.pcapng.out
index 39475fc01..ec0d5bf79 100644
--- a/test/results/stats/default/avast_securedns.pcapng.out
+++ b/test/results/stats/default/avast_securedns.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:218
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:177858
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:177828
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:39
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:39
diff --git a/test/results/stats/default/bacnet.pcap.out b/test/results/stats/default/bacnet.pcap.out
index bbf9f64c6..cbe1c5f7a 100644
--- a/test/results/stats/default/bacnet.pcap.out
+++ b/test/results/stats/default/bacnet.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:57
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:44588
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:44572
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:10
diff --git a/test/results/stats/default/bad-dns-traffic.pcap.out b/test/results/stats/default/bad-dns-traffic.pcap.out
index 7dafabf3e..3eef2caf9 100644
--- a/test/results/stats/default/bad-dns-traffic.pcap.out
+++ b/test/results/stats/default/bad-dns-traffic.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:39
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:40394
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:40424
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
@@ -95,8 +95,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:12
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:6
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
diff --git a/test/results/stats/default/badpackets.pcap.out b/test/results/stats/default/badpackets.pcap.out
index 01e5775b5..0aa8d49df 100644
--- a/test/results/stats/default/badpackets.pcap.out
+++ b/test/results/stats/default/badpackets.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:194
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:127432
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:127424
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/beckhoff_ads.pcapng.out b/test/results/stats/default/beckhoff_ads.pcapng.out
index 52e2dd3bf..1b81b451b 100644
--- a/test/results/stats/default/beckhoff_ads.pcapng.out
+++ b/test/results/stats/default/beckhoff_ads.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9676
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9670
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/bets.pcapng.out b/test/results/stats/default/bets.pcapng.out
index 1db2676c2..68c89ed42 100644
--- a/test/results/stats/default/bets.pcapng.out
+++ b/test/results/stats/default/bets.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11390
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11384
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/bfd.pcap.out b/test/results/stats/default/bfd.pcap.out
index 18b36b097..35b79bdf7 100644
--- a/test/results/stats/default/bfd.pcap.out
+++ b/test/results/stats/default/bfd.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:26
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18517
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18511
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/bitcoin.pcap.out b/test/results/stats/default/bitcoin.pcap.out
index ded220540..fa286c2a9 100644
--- a/test/results/stats/default/bitcoin.pcap.out
+++ b/test/results/stats/default/bitcoin.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:57
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:49970
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:49958
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/bittorrent.pcap.out b/test/results/stats/default/bittorrent.pcap.out
index 9b10d3b07..28c1c68d9 100644
--- a/test/results/stats/default/bittorrent.pcap.out
+++ b/test/results/stats/default/bittorrent.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:164
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:148984
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:148978
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:24
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:11
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:13
diff --git a/test/results/stats/default/bittorrent_tcp_miss.pcapng.out b/test/results/stats/default/bittorrent_tcp_miss.pcapng.out
index 3406490bb..303cd1b1e 100644
--- a/test/results/stats/default/bittorrent_tcp_miss.pcapng.out
+++ b/test/results/stats/default/bittorrent_tcp_miss.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10989
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10983
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/bittorrent_utp.pcap.out b/test/results/stats/default/bittorrent_utp.pcap.out
index ee5dcc4b3..5f9d4331e 100644
--- a/test/results/stats/default/bittorrent_utp.pcap.out
+++ b/test/results/stats/default/bittorrent_utp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:23
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19385
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19377
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/bjnp.pcap.out b/test/results/stats/default/bjnp.pcap.out
index 005ba819e..256eac800 100644
--- a/test/results/stats/default/bjnp.pcap.out
+++ b/test/results/stats/default/bjnp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:43
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:34000
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33994
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:10
diff --git a/test/results/stats/default/bot.pcap.out b/test/results/stats/default/bot.pcap.out
index e4caeb3df..48d920f6b 100644
--- a/test/results/stats/default/bot.pcap.out
+++ b/test/results/stats/default/bot.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10428
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10422
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/bt-dns.pcap.out b/test/results/stats/default/bt-dns.pcap.out
index 5c80590a1..418e72751 100644
--- a/test/results/stats/default/bt-dns.pcap.out
+++ b/test/results/stats/default/bt-dns.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6067
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6063
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/bt-http.pcapng.out b/test/results/stats/default/bt-http.pcapng.out
index ec8ce5644..2c03b0b66 100644
--- a/test/results/stats/default/bt-http.pcapng.out
+++ b/test/results/stats/default/bt-http.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8648
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8642
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/bt_search.pcap.out b/test/results/stats/default/bt_search.pcap.out
index 27ff0081c..5d388bd49 100644
--- a/test/results/stats/default/bt_search.pcap.out
+++ b/test/results/stats/default/bt_search.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5973
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5967
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/c1222.pcapng.out b/test/results/stats/default/c1222.pcapng.out
index 758b62ade..0d153539f 100644
--- a/test/results/stats/default/c1222.pcapng.out
+++ b/test/results/stats/default/c1222.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9909
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9903
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/cachefly.pcapng.out b/test/results/stats/default/cachefly.pcapng.out
index 0862c0a9e..78cb74b2b 100644
--- a/test/results/stats/default/cachefly.pcapng.out
+++ b/test/results/stats/default/cachefly.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17911
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17905
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/can.pcap.out b/test/results/stats/default/can.pcap.out
index ee54af259..74e3c11e4 100644
--- a/test/results/stats/default/can.pcap.out
+++ b/test/results/stats/default/can.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:36
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29214
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29208
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:8
diff --git a/test/results/stats/default/capwap.pcap.out b/test/results/stats/default/capwap.pcap.out
index adbea52f6..26ed41546 100644
--- a/test/results/stats/default/capwap.pcap.out
+++ b/test/results/stats/default/capwap.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:70
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:56303
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:56297
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/capwap_data.pcapng.out b/test/results/stats/default/capwap_data.pcapng.out
index f012d6f9d..131f8825c 100644
--- a/test/results/stats/default/capwap_data.pcapng.out
+++ b/test/results/stats/default/capwap_data.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:31
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14086
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14080
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/cassandra.pcap.out b/test/results/stats/default/cassandra.pcap.out
index 5fa48f010..c6340152a 100644
--- a/test/results/stats/default/cassandra.pcap.out
+++ b/test/results/stats/default/cassandra.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:26
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17839
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17833
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/ceph.pcap.out b/test/results/stats/default/ceph.pcap.out
index a51e32a8a..74bb816b6 100644
--- a/test/results/stats/default/ceph.pcap.out
+++ b/test/results/stats/default/ceph.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9418
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9412
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/check_mk_new.pcap.out b/test/results/stats/default/check_mk_new.pcap.out
index 75696e59f..1a78d3b9c 100644
--- a/test/results/stats/default/check_mk_new.pcap.out
+++ b/test/results/stats/default/check_mk_new.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9572
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9566
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/chrome.pcap.out b/test/results/stats/default/chrome.pcap.out
index 3ac22fe65..d5c0183f3 100644
--- a/test/results/stats/default/chrome.pcap.out
+++ b/test/results/stats/default/chrome.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:57
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:48730
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:48724
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/cip_io.pcap.out b/test/results/stats/default/cip_io.pcap.out
index 9b47ecd5a..e2ef94d90 100644
--- a/test/results/stats/default/cip_io.pcap.out
+++ b/test/results/stats/default/cip_io.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6822
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6816
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/citrix.pcap.out b/test/results/stats/default/citrix.pcap.out
index 1c4edb889..472cdaad5 100644
--- a/test/results/stats/default/citrix.pcap.out
+++ b/test/results/stats/default/citrix.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8353
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8349
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/cloudflare-warp.pcap.out b/test/results/stats/default/cloudflare-warp.pcap.out
index a2edaac8d..ffccc652b 100644
--- a/test/results/stats/default/cloudflare-warp.pcap.out
+++ b/test/results/stats/default/cloudflare-warp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:63
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:48760
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:48754
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/coap_mqtt.pcap.out b/test/results/stats/default/coap_mqtt.pcap.out
index c61e945c4..78fd9b031 100644
--- a/test/results/stats/default/coap_mqtt.pcap.out
+++ b/test/results/stats/default/coap_mqtt.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:121
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:102092
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:102082
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:16
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:16
diff --git a/test/results/stats/default/collectd.pcap.out b/test/results/stats/default/collectd.pcap.out
index f473284e3..f0ede6a75 100644
--- a/test/results/stats/default/collectd.pcap.out
+++ b/test/results/stats/default/collectd.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:74
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:103040
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:103264
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:9
diff --git a/test/results/stats/default/corba.pcap.out b/test/results/stats/default/corba.pcap.out
index 6cc8e378e..536a4e340 100644
--- a/test/results/stats/default/corba.pcap.out
+++ b/test/results/stats/default/corba.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14638
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14632
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/cpha.pcap.out b/test/results/stats/default/cpha.pcap.out
index 057537211..f873e335f 100644
--- a/test/results/stats/default/cpha.pcap.out
+++ b/test/results/stats/default/cpha.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5077
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5071
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/crawler_false_positive.pcapng.out b/test/results/stats/default/crawler_false_positive.pcapng.out
index dfd71b057..a44b2189a 100644
--- a/test/results/stats/default/crawler_false_positive.pcapng.out
+++ b/test/results/stats/default/crawler_false_positive.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8746
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8740
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/crynet.pcap.out b/test/results/stats/default/crynet.pcap.out
index d6bbbd08f..4d7ed6b2b 100644
--- a/test/results/stats/default/crynet.pcap.out
+++ b/test/results/stats/default/crynet.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:64
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:47548
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:47532
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/custom_categories.pcapng.out b/test/results/stats/default/custom_categories.pcapng.out
index b156e6f73..cf44cc681 100644
--- a/test/results/stats/default/custom_categories.pcapng.out
+++ b/test/results/stats/default/custom_categories.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:30
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26666
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26656
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/custom_risk_mask.pcapng.out b/test/results/stats/default/custom_risk_mask.pcapng.out
index 77968213f..c9e75d640 100644
--- a/test/results/stats/default/custom_risk_mask.pcapng.out
+++ b/test/results/stats/default/custom_risk_mask.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9162
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9156
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/custom_rules_ipv6.pcapng.out b/test/results/stats/default/custom_rules_ipv6.pcapng.out
index 489a2fabe..0b5afecac 100644
--- a/test/results/stats/default/custom_rules_ipv6.pcapng.out
+++ b/test/results/stats/default/custom_rules_ipv6.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:34
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:31400
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:31390
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/custom_rules_same-ip_multiple_ports.pcapng.out b/test/results/stats/default/custom_rules_same-ip_multiple_ports.pcapng.out
index 12252f8d5..5d9315bce 100644
--- a/test/results/stats/default/custom_rules_same-ip_multiple_ports.pcapng.out
+++ b/test/results/stats/default/custom_rules_same-ip_multiple_ports.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15317
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15309
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/dazn.pcapng.out b/test/results/stats/default/dazn.pcapng.out
index aed967942..a35b07586 100644
--- a/test/results/stats/default/dazn.pcapng.out
+++ b/test/results/stats/default/dazn.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:27
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29301
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29295
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/dcerpc.pcap.out b/test/results/stats/default/dcerpc.pcap.out
index 70895c14a..ecc7fb1cf 100644
--- a/test/results/stats/default/dcerpc.pcap.out
+++ b/test/results/stats/default/dcerpc.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:29
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29220
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29214
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/dhcp-fuzz.pcapng.out b/test/results/stats/default/dhcp-fuzz.pcapng.out
index b6ffec0ab..402d31bd9 100644
--- a/test/results/stats/default/dhcp-fuzz.pcapng.out
+++ b/test/results/stats/default/dhcp-fuzz.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5398
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5392
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/diameter.pcap.out b/test/results/stats/default/diameter.pcap.out
index c848c7632..39816e0bd 100644
--- a/test/results/stats/default/diameter.pcap.out
+++ b/test/results/stats/default/diameter.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9251
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9245
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/discord.pcap.out b/test/results/stats/default/discord.pcap.out
index a55b176c0..6b9cbb4ad 100644
--- a/test/results/stats/default/discord.pcap.out
+++ b/test/results/stats/default/discord.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:316
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:262135
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:262123
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:34
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:34
diff --git a/test/results/stats/default/discord_mid_flow.pcap.out b/test/results/stats/default/discord_mid_flow.pcap.out
index 2cc60906e..3bcfceafb 100644
--- a/test/results/stats/default/discord_mid_flow.pcap.out
+++ b/test/results/stats/default/discord_mid_flow.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:35
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14085
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14079
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/dlep.pcapng.out b/test/results/stats/default/dlep.pcapng.out
index 4bfa8eb5d..504c39745 100644
--- a/test/results/stats/default/dlep.pcapng.out
+++ b/test/results/stats/default/dlep.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:16
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12344
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12338
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/dlms.pcap.out b/test/results/stats/default/dlms.pcap.out
index ad7659e2a..c9c42e1db 100644
--- a/test/results/stats/default/dlms.pcap.out
+++ b/test/results/stats/default/dlms.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13721
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13713
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dlt_ppp.pcap.out b/test/results/stats/default/dlt_ppp.pcap.out
index 525ee213e..7c3e7bc36 100644
--- a/test/results/stats/default/dlt_ppp.pcap.out
+++ b/test/results/stats/default/dlt_ppp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:4
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:3446
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:3442
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/dnp3.pcap.out b/test/results/stats/default/dnp3.pcap.out
index 11a165ac3..8411ab896 100644
--- a/test/results/stats/default/dnp3.pcap.out
+++ b/test/results/stats/default/dnp3.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:81
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:64303
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:64283
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/dns-exf.pcap.out b/test/results/stats/default/dns-exf.pcap.out
index 33999d95d..e2dc86f01 100644
--- a/test/results/stats/default/dns-exf.pcap.out
+++ b/test/results/stats/default/dns-exf.pcap.out
@@ -95,8 +95,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
diff --git a/test/results/stats/default/dns-google-nsid.pcapng.out b/test/results/stats/default/dns-google-nsid.pcapng.out
index 36ced1f60..045a8b3a7 100644
--- a/test/results/stats/default/dns-google-nsid.pcapng.out
+++ b/test/results/stats/default/dns-google-nsid.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:46
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:40054
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:40046
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/dns-invalid-chars.pcap.out b/test/results/stats/default/dns-invalid-chars.pcap.out
index 9b6b5a615..79486f096 100644
--- a/test/results/stats/default/dns-invalid-chars.pcap.out
+++ b/test/results/stats/default/dns-invalid-chars.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:9
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7436
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7430
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dns-tunnel-iodine.pcap.out b/test/results/stats/default/dns-tunnel-iodine.pcap.out
index 36077f9cf..a281f41e9 100644
--- a/test/results/stats/default/dns-tunnel-iodine.pcap.out
+++ b/test/results/stats/default/dns-tunnel-iodine.pcap.out
@@ -95,8 +95,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:1
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
diff --git a/test/results/stats/default/dns.pcap.out b/test/results/stats/default/dns.pcap.out
index 0f1ea1ee8..8c03c20a5 100644
--- a/test/results/stats/default/dns.pcap.out
+++ b/test/results/stats/default/dns.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8601
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8593
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dns2tcp_tunnel.pcap.out b/test/results/stats/default/dns2tcp_tunnel.pcap.out
index 8c001e4e8..cfd8653af 100644
--- a/test/results/stats/default/dns2tcp_tunnel.pcap.out
+++ b/test/results/stats/default/dns2tcp_tunnel.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12336
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12330
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dns_ambiguous_names.pcap.out b/test/results/stats/default/dns_ambiguous_names.pcap.out
index 4ed5376ac..be2045c5e 100644
--- a/test/results/stats/default/dns_ambiguous_names.pcap.out
+++ b/test/results/stats/default/dns_ambiguous_names.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:63
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:55455
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:55449
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:10
diff --git a/test/results/stats/default/dns_doh.pcap.out b/test/results/stats/default/dns_doh.pcap.out
index e5770e938..2b86fa0f6 100644
--- a/test/results/stats/default/dns_doh.pcap.out
+++ b/test/results/stats/default/dns_doh.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11807
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11801
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dns_dot.pcap.out b/test/results/stats/default/dns_dot.pcap.out
index cb51aee9f..4e92bc2a6 100644
--- a/test/results/stats/default/dns_dot.pcap.out
+++ b/test/results/stats/default/dns_dot.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10474
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10468
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dns_exfiltration.pcap.out b/test/results/stats/default/dns_exfiltration.pcap.out
index 619882402..797113adb 100644
--- a/test/results/stats/default/dns_exfiltration.pcap.out
+++ b/test/results/stats/default/dns_exfiltration.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14279
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14273
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dns_fragmented.pcap.out b/test/results/stats/default/dns_fragmented.pcap.out
index 80fed3d0b..de464d098 100644
--- a/test/results/stats/default/dns_fragmented.pcap.out
+++ b/test/results/stats/default/dns_fragmented.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:153
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:146536
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:146526
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:21
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:19
diff --git a/test/results/stats/default/dns_invert_query.pcapng.out b/test/results/stats/default/dns_invert_query.pcapng.out
index 58f3f7379..3f2f2e199 100644
--- a/test/results/stats/default/dns_invert_query.pcapng.out
+++ b/test/results/stats/default/dns_invert_query.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5864
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5858
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dns_long_domainname.pcap.out b/test/results/stats/default/dns_long_domainname.pcap.out
index 604bd1c3f..69639dcf6 100644
--- a/test/results/stats/default/dns_long_domainname.pcap.out
+++ b/test/results/stats/default/dns_long_domainname.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:9
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7405
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7399
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dnscrypt-v1-and-resolver-pings.pcap.out b/test/results/stats/default/dnscrypt-v1-and-resolver-pings.pcap.out
index fcc71ec12..fa4349dae 100644
--- a/test/results/stats/default/dnscrypt-v1-and-resolver-pings.pcap.out
+++ b/test/results/stats/default/dnscrypt-v1-and-resolver-pings.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:1539
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:1581014
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:1581006
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:245
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:245
diff --git a/test/results/stats/default/dnscrypt-v2-doh.pcap.out b/test/results/stats/default/dnscrypt-v2-doh.pcap.out
index 22216be00..4cbe244fe 100644
--- a/test/results/stats/default/dnscrypt-v2-doh.pcap.out
+++ b/test/results/stats/default/dnscrypt-v2-doh.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:309
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:416409
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:416403
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:34
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:34
diff --git a/test/results/stats/default/dnscrypt-v2.pcap.out b/test/results/stats/default/dnscrypt-v2.pcap.out
index 47edeadad..53f5d6fe3 100644
--- a/test/results/stats/default/dnscrypt-v2.pcap.out
+++ b/test/results/stats/default/dnscrypt-v2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:18
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18621
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18615
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/dnscrypt_skype_false_positive.pcapng.out b/test/results/stats/default/dnscrypt_skype_false_positive.pcapng.out
index cd7907ac6..1bd5cc3b2 100644
--- a/test/results/stats/default/dnscrypt_skype_false_positive.pcapng.out
+++ b/test/results/stats/default/dnscrypt_skype_false_positive.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11692
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11684
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/doh.pcapng.out b/test/results/stats/default/doh.pcapng.out
index a2b025b9e..544ea0644 100644
--- a/test/results/stats/default/doh.pcapng.out
+++ b/test/results/stats/default/doh.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12229
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12223
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/doq.pcapng.out b/test/results/stats/default/doq.pcapng.out
index 0dcc5ff32..c70214f89 100644
--- a/test/results/stats/default/doq.pcapng.out
+++ b/test/results/stats/default/doq.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18417
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18411
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/doq_adguard.pcapng.out b/test/results/stats/default/doq_adguard.pcapng.out
index 47983bfcf..de3f4b59f 100644
--- a/test/results/stats/default/doq_adguard.pcapng.out
+++ b/test/results/stats/default/doq_adguard.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16737
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16731
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dos_win98_smb_netbeui.pcap.out b/test/results/stats/default/dos_win98_smb_netbeui.pcap.out
index f0e334944..7cad5ffb3 100644
--- a/test/results/stats/default/dos_win98_smb_netbeui.pcap.out
+++ b/test/results/stats/default/dos_win98_smb_netbeui.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:110
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:60104
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:60098
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/dotenv.pcap.out b/test/results/stats/default/dotenv.pcap.out
index 625381428..8b741c003 100644
--- a/test/results/stats/default/dotenv.pcap.out
+++ b/test/results/stats/default/dotenv.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9465
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9475
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/drda_db2.pcap.out b/test/results/stats/default/drda_db2.pcap.out
index 538578919..4fd97447d 100644
--- a/test/results/stats/default/drda_db2.pcap.out
+++ b/test/results/stats/default/drda_db2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9750
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9744
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/dropbox.pcap.out b/test/results/stats/default/dropbox.pcap.out
index 4fa0c7454..b765154e4 100644
--- a/test/results/stats/default/dropbox.pcap.out
+++ b/test/results/stats/default/dropbox.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:132
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:114246
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:114236
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:15
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:15
diff --git a/test/results/stats/default/dtls.pcap.out b/test/results/stats/default/dtls.pcap.out
index 9750cde7c..55b91449f 100644
--- a/test/results/stats/default/dtls.pcap.out
+++ b/test/results/stats/default/dtls.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:9
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8227
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8221
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dtls2.pcap.out b/test/results/stats/default/dtls2.pcap.out
index e57fd1325..2ca207157 100644
--- a/test/results/stats/default/dtls2.pcap.out
+++ b/test/results/stats/default/dtls2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:17
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18040
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18034
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dtls_certificate.pcapng.out b/test/results/stats/default/dtls_certificate.pcapng.out
index 5be31b891..37ee1fcdb 100644
--- a/test/results/stats/default/dtls_certificate.pcapng.out
+++ b/test/results/stats/default/dtls_certificate.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7863
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7857
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dtls_certificate_fragments.pcap.out b/test/results/stats/default/dtls_certificate_fragments.pcap.out
index b20f2ca4c..8e853ece5 100644
--- a/test/results/stats/default/dtls_certificate_fragments.pcap.out
+++ b/test/results/stats/default/dtls_certificate_fragments.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:25
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:30875
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:30867
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/dtls_mid_sessions.pcapng.out b/test/results/stats/default/dtls_mid_sessions.pcapng.out
index 544e3649b..66d00d689 100644
--- a/test/results/stats/default/dtls_mid_sessions.pcapng.out
+++ b/test/results/stats/default/dtls_mid_sessions.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:31
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32984
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32978
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/dtls_old_version.pcapng.out b/test/results/stats/default/dtls_old_version.pcapng.out
index 1f97703f6..d70227962 100644
--- a/test/results/stats/default/dtls_old_version.pcapng.out
+++ b/test/results/stats/default/dtls_old_version.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11578
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11572
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/dtls_session_id_and_coockie_both.pcap.out b/test/results/stats/default/dtls_session_id_and_coockie_both.pcap.out
index 0a3da3a72..37617ba3e 100644
--- a/test/results/stats/default/dtls_session_id_and_coockie_both.pcap.out
+++ b/test/results/stats/default/dtls_session_id_and_coockie_both.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9589
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9583
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/edonkey.pcap.out b/test/results/stats/default/edonkey.pcap.out
index 8710373d0..322457456 100644
--- a/test/results/stats/default/edonkey.pcap.out
+++ b/test/results/stats/default/edonkey.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7878
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7872
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/elasticsearch.pcap.out b/test/results/stats/default/elasticsearch.pcap.out
index 4d8040844..a18ba70a4 100644
--- a/test/results/stats/default/elasticsearch.pcap.out
+++ b/test/results/stats/default/elasticsearch.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:44
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:38548
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:38540
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/elf.pcap.out b/test/results/stats/default/elf.pcap.out
new file mode 100644
index 000000000..571ece3d9
--- /dev/null
+++ b/test/results/stats/default/elf.pcap.out
@@ -0,0 +1,169 @@
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:16
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:45104
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:62064
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:7
+PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-reconnect_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-shutdown_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-status_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_unknown_datalink" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_unknown_l3_protocol" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_unsupported_datalink" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_packet_type_unknown" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_packet_header_invalid" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip4_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip4_size_smaller_than_header" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip4_l4_payload_detection" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip6_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip6_size_smaller_than_header" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip6_l4_payload_detection" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_tcp_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_udp_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_capture_size_smaller_than_packet" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_max_flows_to_track" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_flow_memory_alloc" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_safe_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unsafe_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_potentially_dangerous_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_tracker_ads_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_dangerous_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unrated_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unknown_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_unspecified_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_media_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_vpn_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_email_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_data_transfer_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_web_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_social_network_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_download_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_game_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_chat_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_voip_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_database_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_remote_access_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_cloud_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_network_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_collaborative_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_rpc_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_streaming_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_system_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_software_update_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_music_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_video_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_shopping_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_productivity_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_file_sharing_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_conn_check_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_iot_scada_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_virt_assistant_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_cybersecurity_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_adult_content_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_mining_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_malware_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_advertisment_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_banned_site_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_site_unavail_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_allowed_site_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_antimalware_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_crypto_currency_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_gambling_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_unknown_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_port" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_partial" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_partial_cache" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_cache" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_nbpf" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l3_ip4_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l3_ip6_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l3_other_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_tcp_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_udp_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_icmp_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_other_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_unknown_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_active_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_detected_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_guessed_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_9_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_10_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_11_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_12_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_13_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_14_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_15_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_16_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_17_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_18_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_19_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_20_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_21_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_22_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_23_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_24_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_25_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_26_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_27_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_28_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_29_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_30_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_31_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_32_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_33_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_34_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_35_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_36_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_37_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_38_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_39_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_40_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_41_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
diff --git a/test/results/stats/default/emotet.pcap.out b/test/results/stats/default/emotet.pcap.out
index 926a2941e..387cc3bce 100644
--- a/test/results/stats/default/emotet.pcap.out
+++ b/test/results/stats/default/emotet.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:60
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:52881
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:53381
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
@@ -95,7 +95,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:4
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:3
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:2
diff --git a/test/results/stats/default/encrypted_sni.pcap.out b/test/results/stats/default/encrypted_sni.pcap.out
index 6147131a8..87ab89ddd 100644
--- a/test/results/stats/default/encrypted_sni.pcap.out
+++ b/test/results/stats/default/encrypted_sni.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15362
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15356
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/epicgames.pcapng.out b/test/results/stats/default/epicgames.pcapng.out
index 755e5a7fd..92b50f870 100644
--- a/test/results/stats/default/epicgames.pcapng.out
+++ b/test/results/stats/default/epicgames.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:35
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24744
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24738
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/esp.pcapng.out b/test/results/stats/default/esp.pcapng.out
index 3bf0b3191..a4805f5ef 100644
--- a/test/results/stats/default/esp.pcapng.out
+++ b/test/results/stats/default/esp.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12330
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12324
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/ethereum.pcap.out b/test/results/stats/default/ethereum.pcap.out
index 1080c1144..4439edbd5 100644
--- a/test/results/stats/default/ethereum.pcap.out
+++ b/test/results/stats/default/ethereum.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:573
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:509231
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:509225
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:74
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:47
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:27
diff --git a/test/results/stats/default/ethernetIP.pcap.out b/test/results/stats/default/ethernetIP.pcap.out
index f8f0278e0..79c25c719 100644
--- a/test/results/stats/default/ethernetIP.pcap.out
+++ b/test/results/stats/default/ethernetIP.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:35
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:28701
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:28695
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/ethersbus.pcap.out b/test/results/stats/default/ethersbus.pcap.out
index b26c9eb6e..deb3dc0e4 100644
--- a/test/results/stats/default/ethersbus.pcap.out
+++ b/test/results/stats/default/ethersbus.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7314
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7308
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ethersio.pcap.out b/test/results/stats/default/ethersio.pcap.out
index 845ebe1b9..353920104 100644
--- a/test/results/stats/default/ethersio.pcap.out
+++ b/test/results/stats/default/ethersio.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9680
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9674
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/exe_download.pcap.out b/test/results/stats/default/exe_download.pcap.out
index 449e50a49..c9f467758 100644
--- a/test/results/stats/default/exe_download.pcap.out
+++ b/test/results/stats/default/exe_download.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9960
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10210
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:1
diff --git a/test/results/stats/default/exe_download_as_png.pcap.out b/test/results/stats/default/exe_download_as_png.pcap.out
index a90ac05ea..f8852692a 100644
--- a/test/results/stats/default/exe_download_as_png.pcap.out
+++ b/test/results/stats/default/exe_download_as_png.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12231
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12225
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/facebook.pcap.out b/test/results/stats/default/facebook.pcap.out
index e273af163..30337543c 100644
--- a/test/results/stats/default/facebook.pcap.out
+++ b/test/results/stats/default/facebook.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:23
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20862
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20856
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/fastcgi.pcap.out b/test/results/stats/default/fastcgi.pcap.out
index c016731ad..581446d22 100644
--- a/test/results/stats/default/fastcgi.pcap.out
+++ b/test/results/stats/default/fastcgi.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10892
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10886
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/fins.pcap.out b/test/results/stats/default/fins.pcap.out
index 3bf1a2cd0..8353d0582 100644
--- a/test/results/stats/default/fins.pcap.out
+++ b/test/results/stats/default/fins.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:50
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:28316
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:28308
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/firefox.pcap.out b/test/results/stats/default/firefox.pcap.out
index 7175ab590..f972bb155 100644
--- a/test/results/stats/default/firefox.pcap.out
+++ b/test/results/stats/default/firefox.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:57
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:49168
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:49162
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/fix.pcap.out b/test/results/stats/default/fix.pcap.out
index 84a1942fd..c82aa1659 100644
--- a/test/results/stats/default/fix.pcap.out
+++ b/test/results/stats/default/fix.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:104
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:80498
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:80492
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:12
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:12
diff --git a/test/results/stats/default/fix2.pcap.out b/test/results/stats/default/fix2.pcap.out
index 45914e7c9..d98f1c6e9 100644
--- a/test/results/stats/default/fix2.pcap.out
+++ b/test/results/stats/default/fix2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17079
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17073
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/flute.pcapng.out b/test/results/stats/default/flute.pcapng.out
index a4063f1df..124660a6e 100644
--- a/test/results/stats/default/flute.pcapng.out
+++ b/test/results/stats/default/flute.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8219
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8213
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/forticlient.pcap.out b/test/results/stats/default/forticlient.pcap.out
index 0d8bea511..cd852ea9c 100644
--- a/test/results/stats/default/forticlient.pcap.out
+++ b/test/results/stats/default/forticlient.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:54
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:53525
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:53519
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ftp-start-tls.pcap.out b/test/results/stats/default/ftp-start-tls.pcap.out
index 7a165aabc..fbbe46066 100644
--- a/test/results/stats/default/ftp-start-tls.pcap.out
+++ b/test/results/stats/default/ftp-start-tls.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14722
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14716
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ftp.pcap.out b/test/results/stats/default/ftp.pcap.out
index dbed88127..475bbec9f 100644
--- a/test/results/stats/default/ftp.pcap.out
+++ b/test/results/stats/default/ftp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:29
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26724
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26454
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
@@ -11,7 +11,7 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:174
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:111534
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:15
PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1
@@ -95,7 +95,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:1
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
@@ -117,7 +117,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
diff --git a/test/results/stats/default/ftp_failed.pcap.out b/test/results/stats/default/ftp_failed.pcap.out
index 75ababba3..1a811bb9a 100644
--- a/test/results/stats/default/ftp_failed.pcap.out
+++ b/test/results/stats/default/ftp_failed.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8112
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8106
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/fuzz-2006-06-26-2594.pcap.out b/test/results/stats/default/fuzz-2006-06-26-2594.pcap.out
index 570d31c82..572db7d67 100644
--- a/test/results/stats/default/fuzz-2006-06-26-2594.pcap.out
+++ b/test/results/stats/default/fuzz-2006-06-26-2594.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:2134
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:1900503
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:1900493
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:257
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:255
diff --git a/test/results/stats/default/fuzz-2006-09-29-28586.pcap.out b/test/results/stats/default/fuzz-2006-09-29-28586.pcap.out
index fa56bad2d..9efff16c1 100644
--- a/test/results/stats/default/fuzz-2006-09-29-28586.pcap.out
+++ b/test/results/stats/default/fuzz-2006-09-29-28586.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:219
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:190554
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:190548
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:39
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:12
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:27
diff --git a/test/results/stats/default/fuzz-2020-02-16-11740.pcap.out b/test/results/stats/default/fuzz-2020-02-16-11740.pcap.out
index fda2afb34..8199e4c27 100644
--- a/test/results/stats/default/fuzz-2020-02-16-11740.pcap.out
+++ b/test/results/stats/default/fuzz-2020-02-16-11740.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:615
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:548029
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:548015
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:79
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:79
diff --git a/test/results/stats/default/fuzz-2021-06-07-c6c72a0a56.pcap.out b/test/results/stats/default/fuzz-2021-06-07-c6c72a0a56.pcap.out
index d12b9aa55..2f9374b36 100644
--- a/test/results/stats/default/fuzz-2021-06-07-c6c72a0a56.pcap.out
+++ b/test/results/stats/default/fuzz-2021-06-07-c6c72a0a56.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:3408
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:3402
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/fuzz-2021-10-13.pcap.out b/test/results/stats/default/fuzz-2021-10-13.pcap.out
index f57fb3d49..012da9995 100644
--- a/test/results/stats/default/fuzz-2021-10-13.pcap.out
+++ b/test/results/stats/default/fuzz-2021-10-13.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:5
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:2771
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:2765
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/gaijin_mobile_mixed.pcap.out b/test/results/stats/default/gaijin_mobile_mixed.pcap.out
index b07be0c1a..c6bd6f2a4 100644
--- a/test/results/stats/default/gaijin_mobile_mixed.pcap.out
+++ b/test/results/stats/default/gaijin_mobile_mixed.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:30
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24840
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24832
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/gaijin_warthunder.pcap.out b/test/results/stats/default/gaijin_warthunder.pcap.out
index 37a0f3642..c56f9b117 100644
--- a/test/results/stats/default/gaijin_warthunder.pcap.out
+++ b/test/results/stats/default/gaijin_warthunder.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14243
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14237
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/gearman.pcap.out b/test/results/stats/default/gearman.pcap.out
index a2bc71c9b..60e3a55d7 100644
--- a/test/results/stats/default/gearman.pcap.out
+++ b/test/results/stats/default/gearman.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7289
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7283
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/geforcenow.pcapng.out b/test/results/stats/default/geforcenow.pcapng.out
index 302806e49..40b1c3766 100644
--- a/test/results/stats/default/geforcenow.pcapng.out
+++ b/test/results/stats/default/geforcenow.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:27
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32033
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32027
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/genshin-impact.pcap.out b/test/results/stats/default/genshin-impact.pcap.out
index 452e70138..fc0f03b9e 100644
--- a/test/results/stats/default/genshin-impact.pcap.out
+++ b/test/results/stats/default/genshin-impact.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:56
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39820
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39804
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/git.pcap.out b/test/results/stats/default/git.pcap.out
index 837e6b707..72c328df4 100644
--- a/test/results/stats/default/git.pcap.out
+++ b/test/results/stats/default/git.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9565
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9559
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/gnutella.pcap.out b/test/results/stats/default/gnutella.pcap.out
index ce83fbe84..42205653d 100644
--- a/test/results/stats/default/gnutella.pcap.out
+++ b/test/results/stats/default/gnutella.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:6866
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5752913
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5753419
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:801
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:66
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:735
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:2
diff --git a/test/results/stats/default/google_chat.pcapng.out b/test/results/stats/default/google_chat.pcapng.out
index 70f594f7f..74c965af2 100644
--- a/test/results/stats/default/google_chat.pcapng.out
+++ b/test/results/stats/default/google_chat.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9887
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9881
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/google_meet.pcapng.out b/test/results/stats/default/google_meet.pcapng.out
index 08eecffca..873a46b81 100644
--- a/test/results/stats/default/google_meet.pcapng.out
+++ b/test/results/stats/default/google_meet.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:22246
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:22240
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/google_ssl.pcap.out b/test/results/stats/default/google_ssl.pcap.out
index 1f83770db..28d5c811a 100644
--- a/test/results/stats/default/google_ssl.pcap.out
+++ b/test/results/stats/default/google_ssl.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7280
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7274
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/googledns_android10.pcap.out b/test/results/stats/default/googledns_android10.pcap.out
index 1ead73a3c..e8c748d18 100644
--- a/test/results/stats/default/googledns_android10.pcap.out
+++ b/test/results/stats/default/googledns_android10.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:77
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:70746
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:70740
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/gquic.pcap.out b/test/results/stats/default/gquic.pcap.out
index 198b3ef5e..2ecfc36b6 100644
--- a/test/results/stats/default/gquic.pcap.out
+++ b/test/results/stats/default/gquic.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7048
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7042
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/gquic_only_from_server.pcap.out b/test/results/stats/default/gquic_only_from_server.pcap.out
index ef4da6934..579b2c2a5 100644
--- a/test/results/stats/default/gquic_only_from_server.pcap.out
+++ b/test/results/stats/default/gquic_only_from_server.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14745
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14739
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/gre.pcapng.out b/test/results/stats/default/gre.pcapng.out
index 022cc97ee..b3c6af716 100644
--- a/test/results/stats/default/gre.pcapng.out
+++ b/test/results/stats/default/gre.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5416
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5410
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/gtp_c.pcap.out b/test/results/stats/default/gtp_c.pcap.out
index 76fc6accb..0398ab4ed 100644
--- a/test/results/stats/default/gtp_c.pcap.out
+++ b/test/results/stats/default/gtp_c.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7318
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7312
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/gtp_false_positive.pcapng.out b/test/results/stats/default/gtp_false_positive.pcapng.out
index c805ca891..44ad39313 100644
--- a/test/results/stats/default/gtp_false_positive.pcapng.out
+++ b/test/results/stats/default/gtp_false_positive.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:22
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16450
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16440
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/gtp_prime.pcapng.out b/test/results/stats/default/gtp_prime.pcapng.out
index f975ab548..358defd8e 100644
--- a/test/results/stats/default/gtp_prime.pcapng.out
+++ b/test/results/stats/default/gtp_prime.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:5
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:2880
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:2874
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/h323-overflow.pcap.out b/test/results/stats/default/h323-overflow.pcap.out
index e9d09afea..593a330a7 100644
--- a/test/results/stats/default/h323-overflow.pcap.out
+++ b/test/results/stats/default/h323-overflow.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5058
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5052
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/h323.pcap.out b/test/results/stats/default/h323.pcap.out
index 8006d7af8..e46ef4e49 100644
--- a/test/results/stats/default/h323.pcap.out
+++ b/test/results/stats/default/h323.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:16
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12122
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12116
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/h323_tcp.pcap.out b/test/results/stats/default/h323_tcp.pcap.out
index 2a85c8226..24107f2b8 100644
--- a/test/results/stats/default/h323_tcp.pcap.out
+++ b/test/results/stats/default/h323_tcp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7547
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7541
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/haproxy.pcap.out b/test/results/stats/default/haproxy.pcap.out
index a49b55bd6..1f02b4af8 100644
--- a/test/results/stats/default/haproxy.pcap.out
+++ b/test/results/stats/default/haproxy.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5481
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5475
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/hart_ip.pcap.out b/test/results/stats/default/hart_ip.pcap.out
index 24628a9fb..746e9933e 100644
--- a/test/results/stats/default/hart_ip.pcap.out
+++ b/test/results/stats/default/hart_ip.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:24
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18169
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18163
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/heuristic_tcp_ack_payload.pcap.out b/test/results/stats/default/heuristic_tcp_ack_payload.pcap.out
index 54c423da7..efed551a5 100644
--- a/test/results/stats/default/heuristic_tcp_ack_payload.pcap.out
+++ b/test/results/stats/default/heuristic_tcp_ack_payload.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:57
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:45401
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:45391
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/hislip.pcap.out b/test/results/stats/default/hislip.pcap.out
index ab7d22ffd..8a40a6177 100644
--- a/test/results/stats/default/hislip.pcap.out
+++ b/test/results/stats/default/hislip.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:39
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32630
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32624
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/hl7.pcap.out b/test/results/stats/default/hl7.pcap.out
index 5afdc6020..ed73a79df 100644
--- a/test/results/stats/default/hl7.pcap.out
+++ b/test/results/stats/default/hl7.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8328
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8322
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/hots.pcapng.out b/test/results/stats/default/hots.pcapng.out
index 56e60473a..b53eabe62 100644
--- a/test/results/stats/default/hots.pcapng.out
+++ b/test/results/stats/default/hots.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:32
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25608
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25598
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/hpvirtgrp.pcap.out b/test/results/stats/default/hpvirtgrp.pcap.out
index 551af1e3d..056a2767c 100644
--- a/test/results/stats/default/hpvirtgrp.pcap.out
+++ b/test/results/stats/default/hpvirtgrp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:82
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:57222
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:57202
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:9
diff --git a/test/results/stats/default/hsrp0.pcap.out b/test/results/stats/default/hsrp0.pcap.out
index a9ddcc6d9..5d4fb35d9 100644
--- a/test/results/stats/default/hsrp0.pcap.out
+++ b/test/results/stats/default/hsrp0.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14756
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14750
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/hsrp2.pcap.out b/test/results/stats/default/hsrp2.pcap.out
index 2ef503f4a..f1323472f 100644
--- a/test/results/stats/default/hsrp2.pcap.out
+++ b/test/results/stats/default/hsrp2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8394
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8388
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/hsrp2_ipv6.pcapng.out b/test/results/stats/default/hsrp2_ipv6.pcapng.out
index bbccda675..ef8ed47a0 100644
--- a/test/results/stats/default/hsrp2_ipv6.pcapng.out
+++ b/test/results/stats/default/hsrp2_ipv6.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:23
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18281
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18275
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/http-crash-content-disposition.pcap.out b/test/results/stats/default/http-crash-content-disposition.pcap.out
index b6d0ee00a..3b5b604d5 100644
--- a/test/results/stats/default/http-crash-content-disposition.pcap.out
+++ b/test/results/stats/default/http-crash-content-disposition.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8328
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8322
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/http-lines-split.pcap.out b/test/results/stats/default/http-lines-split.pcap.out
index 0dcb8d825..9e403d29c 100644
--- a/test/results/stats/default/http-lines-split.pcap.out
+++ b/test/results/stats/default/http-lines-split.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9070
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9064
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/http-manipulated.pcap.out b/test/results/stats/default/http-manipulated.pcap.out
index efbc2fbea..d987cbf56 100644
--- a/test/results/stats/default/http-manipulated.pcap.out
+++ b/test/results/stats/default/http-manipulated.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14920
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14912
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/http-proxy.pcapng.out b/test/results/stats/default/http-proxy.pcapng.out
index 7156426ff..ccaf9a1b3 100644
--- a/test/results/stats/default/http-proxy.pcapng.out
+++ b/test/results/stats/default/http-proxy.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7933
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7927
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/http.pcapng.out b/test/results/stats/default/http.pcapng.out
index 77a6d521a..6ef1df07b 100644
--- a/test/results/stats/default/http.pcapng.out
+++ b/test/results/stats/default/http.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7551
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7545
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/http2.pcapng.out b/test/results/stats/default/http2.pcapng.out
index 1f7826ce9..8d23f005b 100644
--- a/test/results/stats/default/http2.pcapng.out
+++ b/test/results/stats/default/http2.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7817
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7811
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/http_asymmetric.pcapng.out b/test/results/stats/default/http_asymmetric.pcapng.out
index 084dc554a..0edc13bdb 100644
--- a/test/results/stats/default/http_asymmetric.pcapng.out
+++ b/test/results/stats/default/http_asymmetric.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20864
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20858
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/http_auth.pcap.out b/test/results/stats/default/http_auth.pcap.out
index eedac873d..fbd4879d7 100644
--- a/test/results/stats/default/http_auth.pcap.out
+++ b/test/results/stats/default/http_auth.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12880
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12874
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/http_connect.pcap.out b/test/results/stats/default/http_connect.pcap.out
index 9b6afd632..f630ce0d1 100644
--- a/test/results/stats/default/http_connect.pcap.out
+++ b/test/results/stats/default/http_connect.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:28
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24967
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24961
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/http_guessed_host_and_guessed.pcapng.out b/test/results/stats/default/http_guessed_host_and_guessed.pcapng.out
index d936a0b45..d55059062 100644
--- a/test/results/stats/default/http_guessed_host_and_guessed.pcapng.out
+++ b/test/results/stats/default/http_guessed_host_and_guessed.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5537
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5531
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/http_invalid_server.pcap.out b/test/results/stats/default/http_invalid_server.pcap.out
index 89f0351a4..1d93ebee7 100644
--- a/test/results/stats/default/http_invalid_server.pcap.out
+++ b/test/results/stats/default/http_invalid_server.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9413
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9407
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/http_ipv6.pcap.out b/test/results/stats/default/http_ipv6.pcap.out
index 5ece38c45..cdd10086d 100644
--- a/test/results/stats/default/http_ipv6.pcap.out
+++ b/test/results/stats/default/http_ipv6.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:117
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:105893
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:106005
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:15
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:12
diff --git a/test/results/stats/default/http_on_sip_port.pcap.out b/test/results/stats/default/http_on_sip_port.pcap.out
index 23e28437d..57f2308b0 100644
--- a/test/results/stats/default/http_on_sip_port.pcap.out
+++ b/test/results/stats/default/http_on_sip_port.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11319
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11313
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/http_origin_different_than_host.pcap.out b/test/results/stats/default/http_origin_different_than_host.pcap.out
index 6ce55e91e..d7d2fa184 100644
--- a/test/results/stats/default/http_origin_different_than_host.pcap.out
+++ b/test/results/stats/default/http_origin_different_than_host.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6192
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6186
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/http_starting_with_reply.pcapng.out b/test/results/stats/default/http_starting_with_reply.pcapng.out
index 1b0f8c2b9..4b298170b 100644
--- a/test/results/stats/default/http_starting_with_reply.pcapng.out
+++ b/test/results/stats/default/http_starting_with_reply.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16346
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16340
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/http_ua_splitted_in_two_pkts.pcapng.out b/test/results/stats/default/http_ua_splitted_in_two_pkts.pcapng.out
index 55da2c44c..de01c426c 100644
--- a/test/results/stats/default/http_ua_splitted_in_two_pkts.pcapng.out
+++ b/test/results/stats/default/http_ua_splitted_in_two_pkts.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13340
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13334
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/i3d.pcap.out b/test/results/stats/default/i3d.pcap.out
index 4f6d58e79..92f294993 100644
--- a/test/results/stats/default/i3d.pcap.out
+++ b/test/results/stats/default/i3d.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:37
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33186
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33176
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/iax.pcap.out b/test/results/stats/default/iax.pcap.out
index e0f952b40..7d478cc59 100644
--- a/test/results/stats/default/iax.pcap.out
+++ b/test/results/stats/default/iax.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9447
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9441
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/icmp-tunnel.pcap.out b/test/results/stats/default/icmp-tunnel.pcap.out
index a6ddf4ac0..b5931b8be 100644
--- a/test/results/stats/default/icmp-tunnel.pcap.out
+++ b/test/results/stats/default/icmp-tunnel.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:39
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39278
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39270
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/iec60780-5-104.pcap.out b/test/results/stats/default/iec60780-5-104.pcap.out
index a8e153891..76b75b7cb 100644
--- a/test/results/stats/default/iec60780-5-104.pcap.out
+++ b/test/results/stats/default/iec60780-5-104.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:53
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:37842
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:37834
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/ieee_c37118.pcap.out b/test/results/stats/default/ieee_c37118.pcap.out
index 46adcf584..4c5614677 100644
--- a/test/results/stats/default/ieee_c37118.pcap.out
+++ b/test/results/stats/default/ieee_c37118.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:22
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18472
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18464
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/imap-starttls.pcap.out b/test/results/stats/default/imap-starttls.pcap.out
index 6e1c882fe..4b467dfbb 100644
--- a/test/results/stats/default/imap-starttls.pcap.out
+++ b/test/results/stats/default/imap-starttls.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14697
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14691
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/imap.pcap.out b/test/results/stats/default/imap.pcap.out
index 06eb2deb6..074cb30da 100644
--- a/test/results/stats/default/imap.pcap.out
+++ b/test/results/stats/default/imap.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10232
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10226
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/imaps.pcap.out b/test/results/stats/default/imaps.pcap.out
index 3411a3780..1200444b1 100644
--- a/test/results/stats/default/imaps.pcap.out
+++ b/test/results/stats/default/imaps.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:23
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18231
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18223
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/imo.pcap.out b/test/results/stats/default/imo.pcap.out
index 23b5977ad..b0d275feb 100644
--- a/test/results/stats/default/imo.pcap.out
+++ b/test/results/stats/default/imo.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19512
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19506
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/instagram.pcap.out b/test/results/stats/default/instagram.pcap.out
index 14627805a..4b9f98611 100644
--- a/test/results/stats/default/instagram.pcap.out
+++ b/test/results/stats/default/instagram.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:299
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:319254
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:319718
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:38
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:32
diff --git a/test/results/stats/default/ip_fragmented_garbage.pcap.out b/test/results/stats/default/ip_fragmented_garbage.pcap.out
index c839e8185..9402ce196 100644
--- a/test/results/stats/default/ip_fragmented_garbage.pcap.out
+++ b/test/results/stats/default/ip_fragmented_garbage.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:51
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25523
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25517
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/iphone.pcap.out b/test/results/stats/default/iphone.pcap.out
index dae7b264d..ce53b4c95 100644
--- a/test/results/stats/default/iphone.pcap.out
+++ b/test/results/stats/default/iphone.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:356
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:323613
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:323607
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:51
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:48
diff --git a/test/results/stats/default/ipp.pcap.out b/test/results/stats/default/ipp.pcap.out
index 6076d46a9..b018c37bc 100644
--- a/test/results/stats/default/ipp.pcap.out
+++ b/test/results/stats/default/ipp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:28
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24124
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24118
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/ipsec_isakmp_esp.pcap.out b/test/results/stats/default/ipsec_isakmp_esp.pcap.out
index f342890cf..da8c3b075 100644
--- a/test/results/stats/default/ipsec_isakmp_esp.pcap.out
+++ b/test/results/stats/default/ipsec_isakmp_esp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:321
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:314822
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:314796
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:36
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:36
diff --git a/test/results/stats/default/ipv6_in_gtp.pcap.out b/test/results/stats/default/ipv6_in_gtp.pcap.out
index 89c552e0e..7b178f6a2 100644
--- a/test/results/stats/default/ipv6_in_gtp.pcap.out
+++ b/test/results/stats/default/ipv6_in_gtp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:4164
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:4156
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/irc.pcap.out b/test/results/stats/default/irc.pcap.out
index 652a3579b..06020a8d6 100644
--- a/test/results/stats/default/irc.pcap.out
+++ b/test/results/stats/default/irc.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8026
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8020
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/iso9506-1-mms.pcap.out b/test/results/stats/default/iso9506-1-mms.pcap.out
index 528317cb9..0a6d792d2 100644
--- a/test/results/stats/default/iso9506-1-mms.pcap.out
+++ b/test/results/stats/default/iso9506-1-mms.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7388
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7382
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/ja3_lots_of_cipher_suites.pcap.out b/test/results/stats/default/ja3_lots_of_cipher_suites.pcap.out
index f4d9ce35b..34a33a8bb 100644
--- a/test/results/stats/default/ja3_lots_of_cipher_suites.pcap.out
+++ b/test/results/stats/default/ja3_lots_of_cipher_suites.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:25
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15871
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15865
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/ja3_lots_of_cipher_suites_2_anon.pcap.out b/test/results/stats/default/ja3_lots_of_cipher_suites_2_anon.pcap.out
index 954cb5f31..f9a0adebf 100644
--- a/test/results/stats/default/ja3_lots_of_cipher_suites_2_anon.pcap.out
+++ b/test/results/stats/default/ja3_lots_of_cipher_suites_2_anon.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:37
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:22385
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:22379
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/jabber.pcap.out b/test/results/stats/default/jabber.pcap.out
index 9a87ea20a..b76bd9f89 100644
--- a/test/results/stats/default/jabber.pcap.out
+++ b/test/results/stats/default/jabber.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:110
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:81357
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:81335
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:12
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:9
diff --git a/test/results/stats/default/jsonrpc.pcap.out b/test/results/stats/default/jsonrpc.pcap.out
index 95c11d497..1cdbbb7fd 100644
--- a/test/results/stats/default/jsonrpc.pcap.out
+++ b/test/results/stats/default/jsonrpc.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16294
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16288
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/kafka.pcapng.out b/test/results/stats/default/kafka.pcapng.out
index 0d644e367..ad9a3a7ff 100644
--- a/test/results/stats/default/kafka.pcapng.out
+++ b/test/results/stats/default/kafka.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7390
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7388
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/kcp.pcap.out b/test/results/stats/default/kcp.pcap.out
index a23602f48..b6edfff38 100644
--- a/test/results/stats/default/kcp.pcap.out
+++ b/test/results/stats/default/kcp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:36
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:46199
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:46193
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/kerberos-error.pcap.out b/test/results/stats/default/kerberos-error.pcap.out
index f3ef1e076..e104e6958 100644
--- a/test/results/stats/default/kerberos-error.pcap.out
+++ b/test/results/stats/default/kerberos-error.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6282
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6276
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/kerberos-login.pcap.out b/test/results/stats/default/kerberos-login.pcap.out
index 7b64a1175..b5bd9078a 100644
--- a/test/results/stats/default/kerberos-login.pcap.out
+++ b/test/results/stats/default/kerberos-login.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:80
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:101255
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:101247
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:13
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:12
diff --git a/test/results/stats/default/kerberos.pcap.out b/test/results/stats/default/kerberos.pcap.out
index b4bd892e9..b8c317a9b 100644
--- a/test/results/stats/default/kerberos.pcap.out
+++ b/test/results/stats/default/kerberos.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:190
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:172997
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:174525
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:36
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:36
diff --git a/test/results/stats/default/kerberos_fuzz.pcapng.out b/test/results/stats/default/kerberos_fuzz.pcapng.out
index d8df45af7..3320b3651 100644
--- a/test/results/stats/default/kerberos_fuzz.pcapng.out
+++ b/test/results/stats/default/kerberos_fuzz.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5589
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5583
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/kismet.pcap.out b/test/results/stats/default/kismet.pcap.out
index b8723c58c..bac089722 100644
--- a/test/results/stats/default/kismet.pcap.out
+++ b/test/results/stats/default/kismet.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9764
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9758
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/kontiki.pcap.out b/test/results/stats/default/kontiki.pcap.out
index fc08ff680..c6cfca2ef 100644
--- a/test/results/stats/default/kontiki.pcap.out
+++ b/test/results/stats/default/kontiki.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:48
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:38397
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:38509
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:8
diff --git a/test/results/stats/default/line.pcap.out b/test/results/stats/default/line.pcap.out
index 8d97debad..6a89035be 100644
--- a/test/results/stats/default/line.pcap.out
+++ b/test/results/stats/default/line.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:51
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:52145
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:52137
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/linecall_falsepositve.pcap.out b/test/results/stats/default/linecall_falsepositve.pcap.out
index b6a21e18d..6d1bcf2ab 100644
--- a/test/results/stats/default/linecall_falsepositve.pcap.out
+++ b/test/results/stats/default/linecall_falsepositve.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:67
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39115
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39109
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/lisp_registration.pcap.out b/test/results/stats/default/lisp_registration.pcap.out
index 6f63b00fe..da658b647 100644
--- a/test/results/stats/default/lisp_registration.pcap.out
+++ b/test/results/stats/default/lisp_registration.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:35
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26539
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26533
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/log4j-webapp-exploit.pcap.out b/test/results/stats/default/log4j-webapp-exploit.pcap.out
index 0cc326f96..6d41056c2 100644
--- a/test/results/stats/default/log4j-webapp-exploit.pcap.out
+++ b/test/results/stats/default/log4j-webapp-exploit.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:67
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:51205
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:51199
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/lol_wild_rift_udp.pcap.out b/test/results/stats/default/lol_wild_rift_udp.pcap.out
index a7b5888bd..20f32d29a 100644
--- a/test/results/stats/default/lol_wild_rift_udp.pcap.out
+++ b/test/results/stats/default/lol_wild_rift_udp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:30
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24051
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24037
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/long_tls_certificate.pcap.out b/test/results/stats/default/long_tls_certificate.pcap.out
index 1ad7ace07..f15d5858f 100644
--- a/test/results/stats/default/long_tls_certificate.pcap.out
+++ b/test/results/stats/default/long_tls_certificate.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17333
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17327
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/lru_ipv6_caches.pcapng.out b/test/results/stats/default/lru_ipv6_caches.pcapng.out
index 7dcdaa3d8..ac7365164 100644
--- a/test/results/stats/default/lru_ipv6_caches.pcapng.out
+++ b/test/results/stats/default/lru_ipv6_caches.pcapng.out
@@ -1,5 +1,5 @@
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:86
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:87625
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:89
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:91461
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:12
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:12
@@ -7,11 +7,11 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:6
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:14408
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:846
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:8
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:11
PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:41
PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1
@@ -94,7 +94,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:10
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:13
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
@@ -158,7 +158,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:10
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:13
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0
diff --git a/test/results/stats/default/malformed_dns.pcap.out b/test/results/stats/default/malformed_dns.pcap.out
index 694162da6..f1578e87d 100644
--- a/test/results/stats/default/malformed_dns.pcap.out
+++ b/test/results/stats/default/malformed_dns.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15780
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15774
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/malformed_icmp.pcap.out b/test/results/stats/default/malformed_icmp.pcap.out
index f294f9672..3d7ae2547 100644
--- a/test/results/stats/default/malformed_icmp.pcap.out
+++ b/test/results/stats/default/malformed_icmp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5254
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5248
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/malware.pcap.out b/test/results/stats/default/malware.pcap.out
index 67cf48af1..fd263d10e 100644
--- a/test/results/stats/default/malware.pcap.out
+++ b/test/results/stats/default/malware.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:44
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39809
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39799
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/memcached.cap.out b/test/results/stats/default/memcached.cap.out
index cdc57af18..6b8fc78da 100644
--- a/test/results/stats/default/memcached.cap.out
+++ b/test/results/stats/default/memcached.cap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7354
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7348
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/merakicloud.pcapng.out b/test/results/stats/default/merakicloud.pcapng.out
index f3b967655..35b08e1ce 100644
--- a/test/results/stats/default/merakicloud.pcapng.out
+++ b/test/results/stats/default/merakicloud.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17135
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17129
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/mgcp.pcap.out b/test/results/stats/default/mgcp.pcap.out
index d4dfe7043..9f98c485b 100644
--- a/test/results/stats/default/mgcp.pcap.out
+++ b/test/results/stats/default/mgcp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:36
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26350
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26336
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/mining.pcapng.out b/test/results/stats/default/mining.pcapng.out
index 1e8d39331..4f400e0d9 100644
--- a/test/results/stats/default/mining.pcapng.out
+++ b/test/results/stats/default/mining.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:41
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:36316
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:36306
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/modbus.pcap.out b/test/results/stats/default/modbus.pcap.out
index a46fe7d9b..5678aa63d 100644
--- a/test/results/stats/default/modbus.pcap.out
+++ b/test/results/stats/default/modbus.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9518
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9512
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/monero.pcap.out b/test/results/stats/default/monero.pcap.out
index 5d15cc801..cd5ded36d 100644
--- a/test/results/stats/default/monero.pcap.out
+++ b/test/results/stats/default/monero.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:35
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25220
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25214
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/mongo_false_positive.pcapng.out b/test/results/stats/default/mongo_false_positive.pcapng.out
index 83d8fa83c..95971f2a8 100644
--- a/test/results/stats/default/mongo_false_positive.pcapng.out
+++ b/test/results/stats/default/mongo_false_positive.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10464
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10458
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/mongodb.pcap.out b/test/results/stats/default/mongodb.pcap.out
index af91e2096..3aeca1b60 100644
--- a/test/results/stats/default/mongodb.pcap.out
+++ b/test/results/stats/default/mongodb.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:45
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:31685
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:31671
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/mpeg-dash.pcap.out b/test/results/stats/default/mpeg-dash.pcap.out
index 0e91392ad..6ff4ccb46 100644
--- a/test/results/stats/default/mpeg-dash.pcap.out
+++ b/test/results/stats/default/mpeg-dash.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:30
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:27834
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:27826
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/mpeg.pcap.out b/test/results/stats/default/mpeg.pcap.out
index 9aa808a88..c7d54db12 100644
--- a/test/results/stats/default/mpeg.pcap.out
+++ b/test/results/stats/default/mpeg.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8754
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8748
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/mpegts.pcap.out b/test/results/stats/default/mpegts.pcap.out
index c5e91a43f..b8fe494ad 100644
--- a/test/results/stats/default/mpegts.pcap.out
+++ b/test/results/stats/default/mpegts.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7348
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7342
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/mqtt.pcap.out b/test/results/stats/default/mqtt.pcap.out
index ef92a2260..df0b6bb07 100644
--- a/test/results/stats/default/mqtt.pcap.out
+++ b/test/results/stats/default/mqtt.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11047
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11041
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/mssql_tds.pcap.out b/test/results/stats/default/mssql_tds.pcap.out
index 23fefc148..90745750a 100644
--- a/test/results/stats/default/mssql_tds.pcap.out
+++ b/test/results/stats/default/mssql_tds.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:65
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:64535
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:64525
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:12
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:12
diff --git a/test/results/stats/default/mullvad_dns.pcap.out b/test/results/stats/default/mullvad_dns.pcap.out
index 6256e4002..d8240cc13 100644
--- a/test/results/stats/default/mullvad_dns.pcap.out
+++ b/test/results/stats/default/mullvad_dns.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:9
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7023
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7017
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/mullvad_wireguard.pcap.out b/test/results/stats/default/mullvad_wireguard.pcap.out
index 80d36243b..593b0f5e6 100644
--- a/test/results/stats/default/mullvad_wireguard.pcap.out
+++ b/test/results/stats/default/mullvad_wireguard.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8245
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8239
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/mumble.pcapng.out b/test/results/stats/default/mumble.pcapng.out
index 57ef7402c..7279f2b4d 100644
--- a/test/results/stats/default/mumble.pcapng.out
+++ b/test/results/stats/default/mumble.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:22
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17497
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17491
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/munin.pcap.out b/test/results/stats/default/munin.pcap.out
index 5165dd4ff..10db9f7e6 100644
--- a/test/results/stats/default/munin.pcap.out
+++ b/test/results/stats/default/munin.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:38
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25843
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25831
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/mysql.pcapng.out b/test/results/stats/default/mysql.pcapng.out
index 8f873de2a..8411a97b8 100644
--- a/test/results/stats/default/mysql.pcapng.out
+++ b/test/results/stats/default/mysql.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13762
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13754
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/natpmp.pcap.out b/test/results/stats/default/natpmp.pcap.out
index f7530c885..c8fd8bdc9 100644
--- a/test/results/stats/default/natpmp.pcap.out
+++ b/test/results/stats/default/natpmp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:31
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24155
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24147
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/nats.pcap.out b/test/results/stats/default/nats.pcap.out
index ba191b152..d92cdb554 100644
--- a/test/results/stats/default/nats.pcap.out
+++ b/test/results/stats/default/nats.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13447
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13441
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ndpi_match_string_subprotocol__error.pcapng.out b/test/results/stats/default/ndpi_match_string_subprotocol__error.pcapng.out
index 6b0f2c78f..6380761ce 100644
--- a/test/results/stats/default/ndpi_match_string_subprotocol__error.pcapng.out
+++ b/test/results/stats/default/ndpi_match_string_subprotocol__error.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12521
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12513
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/nest_log_sink.pcap.out b/test/results/stats/default/nest_log_sink.pcap.out
index 0e8cdea7c..40171f710 100644
--- a/test/results/stats/default/nest_log_sink.pcap.out
+++ b/test/results/stats/default/nest_log_sink.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:168
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:146447
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:146419
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:17
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:12
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/netbios.pcap.out b/test/results/stats/default/netbios.pcap.out
index aead1f0a0..2ef8fdfb3 100644
--- a/test/results/stats/default/netbios.pcap.out
+++ b/test/results/stats/default/netbios.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:83
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:68942
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:68936
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:15
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:15
diff --git a/test/results/stats/default/netbios_wildcard_dns_query.pcap.out b/test/results/stats/default/netbios_wildcard_dns_query.pcap.out
index e08baf928..088dc2e2c 100644
--- a/test/results/stats/default/netbios_wildcard_dns_query.pcap.out
+++ b/test/results/stats/default/netbios_wildcard_dns_query.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5390
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5384
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/netease_games.pcapng.out b/test/results/stats/default/netease_games.pcapng.out
index 85d86edfd..74b0b74f8 100644
--- a/test/results/stats/default/netease_games.pcapng.out
+++ b/test/results/stats/default/netease_games.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:42
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33521
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33511
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/netflix.pcap.out b/test/results/stats/default/netflix.pcap.out
index c9565558d..4219611fc 100644
--- a/test/results/stats/default/netflix.pcap.out
+++ b/test/results/stats/default/netflix.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:557
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:555733
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:556677
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:61
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:31
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:30
@@ -95,9 +95,9 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:70
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:18
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:1
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:18
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
@@ -116,7 +116,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:18
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:18
diff --git a/test/results/stats/default/netflow-fritz.pcap.out b/test/results/stats/default/netflow-fritz.pcap.out
index 1b2846bf5..669237680 100644
--- a/test/results/stats/default/netflow-fritz.pcap.out
+++ b/test/results/stats/default/netflow-fritz.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5365
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5359
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/netflowv9.pcap.out b/test/results/stats/default/netflowv9.pcap.out
index ee764486a..46f430e1c 100644
--- a/test/results/stats/default/netflowv9.pcap.out
+++ b/test/results/stats/default/netflowv9.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16551
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16545
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/nfsv2.pcap.out b/test/results/stats/default/nfsv2.pcap.out
index a01db6841..8e9bcf207 100644
--- a/test/results/stats/default/nfsv2.pcap.out
+++ b/test/results/stats/default/nfsv2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:42
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:34513
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:34507
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/nfsv3.pcap.out b/test/results/stats/default/nfsv3.pcap.out
index c73566fa9..3f45b1cb4 100644
--- a/test/results/stats/default/nfsv3.pcap.out
+++ b/test/results/stats/default/nfsv3.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:47
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:38784
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:38778
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:8
diff --git a/test/results/stats/default/nintendo.pcap.out b/test/results/stats/default/nintendo.pcap.out
index aa4accbdf..a6492d907 100644
--- a/test/results/stats/default/nintendo.pcap.out
+++ b/test/results/stats/default/nintendo.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:164
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:135379
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:135476
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:21
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:19
diff --git a/test/results/stats/default/nntp.pcap.out b/test/results/stats/default/nntp.pcap.out
index 3bfb650a7..89bd715f4 100644
--- a/test/results/stats/default/nntp.pcap.out
+++ b/test/results/stats/default/nntp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9676
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9670
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/no_sni.pcap.out b/test/results/stats/default/no_sni.pcap.out
index fd4448174..639bfacc1 100644
--- a/test/results/stats/default/no_sni.pcap.out
+++ b/test/results/stats/default/no_sni.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:79
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:71222
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:71216
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/nomachine.pcapng.out b/test/results/stats/default/nomachine.pcapng.out
index 25fe70c40..bc1df978c 100644
--- a/test/results/stats/default/nomachine.pcapng.out
+++ b/test/results/stats/default/nomachine.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15611
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15605
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ocs.pcap.out b/test/results/stats/default/ocs.pcap.out
index e656f6b8f..f606fc26e 100644
--- a/test/results/stats/default/ocs.pcap.out
+++ b/test/results/stats/default/ocs.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:137
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:113495
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:113489
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:20
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:15
diff --git a/test/results/stats/default/ocsp.pcapng.out b/test/results/stats/default/ocsp.pcapng.out
index aa3e7cba5..7ef47e109 100644
--- a/test/results/stats/default/ocsp.pcapng.out
+++ b/test/results/stats/default/ocsp.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:93
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:84569
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:84555
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/oicq.pcap.out b/test/results/stats/default/oicq.pcap.out
index bc97fb197..ce10331bc 100644
--- a/test/results/stats/default/oicq.pcap.out
+++ b/test/results/stats/default/oicq.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:146
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:118301
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:118269
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:29
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:29
diff --git a/test/results/stats/default/ookla.pcap.out b/test/results/stats/default/ookla.pcap.out
index e210ddb71..689f5e17d 100644
--- a/test/results/stats/default/ookla.pcap.out
+++ b/test/results/stats/default/ookla.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:56
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:43520
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:43512
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/opc-ua.pcap.out b/test/results/stats/default/opc-ua.pcap.out
index 50dbed409..da46278da 100644
--- a/test/results/stats/default/opc-ua.pcap.out
+++ b/test/results/stats/default/opc-ua.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9463
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9457
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/openflow.pcap.out b/test/results/stats/default/openflow.pcap.out
index 1c0ebdf5f..757ce9b47 100644
--- a/test/results/stats/default/openflow.pcap.out
+++ b/test/results/stats/default/openflow.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7388
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7382
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/openvpn-tlscrypt.pcap.out b/test/results/stats/default/openvpn-tlscrypt.pcap.out
index 0e32a2c38..1e509cd52 100644
--- a/test/results/stats/default/openvpn-tlscrypt.pcap.out
+++ b/test/results/stats/default/openvpn-tlscrypt.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:29
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17361
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17355
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/openvpn.pcap.out b/test/results/stats/default/openvpn.pcap.out
index db230ba97..ccc42b674 100644
--- a/test/results/stats/default/openvpn.pcap.out
+++ b/test/results/stats/default/openvpn.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:78
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:72468
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:72452
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/openvpn_nohmac.pcapng.out b/test/results/stats/default/openvpn_nohmac.pcapng.out
index 86732f1a0..21575ea06 100644
--- a/test/results/stats/default/openvpn_nohmac.pcapng.out
+++ b/test/results/stats/default/openvpn_nohmac.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10820
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10814
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/openvpn_nohmac_tcp.pcapng.out b/test/results/stats/default/openvpn_nohmac_tcp.pcapng.out
index a989c1787..68a42fbaa 100644
--- a/test/results/stats/default/openvpn_nohmac_tcp.pcapng.out
+++ b/test/results/stats/default/openvpn_nohmac_tcp.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9709
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9703
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/opera-vpn.pcapng.out b/test/results/stats/default/opera-vpn.pcapng.out
index f4bf5a9a4..e5e261821 100644
--- a/test/results/stats/default/opera-vpn.pcapng.out
+++ b/test/results/stats/default/opera-vpn.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:618
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:617531
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:617525
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:62
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:28
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:34
diff --git a/test/results/stats/default/oracle12.pcapng.out b/test/results/stats/default/oracle12.pcapng.out
index 6b9cfd7b8..4f12f1a55 100644
--- a/test/results/stats/default/oracle12.pcapng.out
+++ b/test/results/stats/default/oracle12.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7424
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7418
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/os_detected.pcapng.out b/test/results/stats/default/os_detected.pcapng.out
index 8037b21b9..3f45271fb 100644
--- a/test/results/stats/default/os_detected.pcapng.out
+++ b/test/results/stats/default/os_detected.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7700
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7694
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ospfv2_add_new_prefix.pcap.out b/test/results/stats/default/ospfv2_add_new_prefix.pcap.out
index 3f09904bd..7495f9989 100644
--- a/test/results/stats/default/ospfv2_add_new_prefix.pcap.out
+++ b/test/results/stats/default/ospfv2_add_new_prefix.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5737
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5731
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ossfuzz_seed_fake_traces_1.pcapng.out b/test/results/stats/default/ossfuzz_seed_fake_traces_1.pcapng.out
index d99696999..4a2045508 100644
--- a/test/results/stats/default/ossfuzz_seed_fake_traces_1.pcapng.out
+++ b/test/results/stats/default/ossfuzz_seed_fake_traces_1.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:59
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:48788
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:48772
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:10
diff --git a/test/results/stats/default/ossfuzz_seed_fake_traces_2.pcapng.out b/test/results/stats/default/ossfuzz_seed_fake_traces_2.pcapng.out
index d827df7c0..b37815687 100644
--- a/test/results/stats/default/ossfuzz_seed_fake_traces_2.pcapng.out
+++ b/test/results/stats/default/ossfuzz_seed_fake_traces_2.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:65
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:49019
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:49007
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/ossfuzz_seed_fake_traces_3.pcapng.out b/test/results/stats/default/ossfuzz_seed_fake_traces_3.pcapng.out
index 3625a9baa..c30bbdcb4 100644
--- a/test/results/stats/default/ossfuzz_seed_fake_traces_3.pcapng.out
+++ b/test/results/stats/default/ossfuzz_seed_fake_traces_3.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7091
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7085
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ossfuzz_seed_fake_traces_4.pcapng.out b/test/results/stats/default/ossfuzz_seed_fake_traces_4.pcapng.out
index 1bb31b5d9..82b024f11 100644
--- a/test/results/stats/default/ossfuzz_seed_fake_traces_4.pcapng.out
+++ b/test/results/stats/default/ossfuzz_seed_fake_traces_4.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5447
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5441
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/path_of_exile.pcapng.out b/test/results/stats/default/path_of_exile.pcapng.out
index 7fbda00d9..d9047ff76 100644
--- a/test/results/stats/default/path_of_exile.pcapng.out
+++ b/test/results/stats/default/path_of_exile.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6897
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6891
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/pfcp.pcapng.out b/test/results/stats/default/pfcp.pcapng.out
index 3e6f24bf8..dfbb250d1 100644
--- a/test/results/stats/default/pfcp.pcapng.out
+++ b/test/results/stats/default/pfcp.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8377
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8371
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/pgm.pcap.out b/test/results/stats/default/pgm.pcap.out
index fc782599b..c203d45dd 100644
--- a/test/results/stats/default/pgm.pcap.out
+++ b/test/results/stats/default/pgm.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11556
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11550
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/pgsql.pcap.out b/test/results/stats/default/pgsql.pcap.out
index 23235d0dd..139359019 100644
--- a/test/results/stats/default/pgsql.pcap.out
+++ b/test/results/stats/default/pgsql.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:52
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:35501
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:35493
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/pia.pcap.out b/test/results/stats/default/pia.pcap.out
index 02e3a3bd5..12a39f703 100644
--- a/test/results/stats/default/pia.pcap.out
+++ b/test/results/stats/default/pia.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12165
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12159
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/pim.pcap.out b/test/results/stats/default/pim.pcap.out
index f96b66706..bed76ada1 100644
--- a/test/results/stats/default/pim.pcap.out
+++ b/test/results/stats/default/pim.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7317
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7311
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/pinterest.pcap.out b/test/results/stats/default/pinterest.pcap.out
index 4b2ead965..c3ffc5849 100644
--- a/test/results/stats/default/pinterest.pcap.out
+++ b/test/results/stats/default/pinterest.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:297
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:297367
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:297361
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:37
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:32
diff --git a/test/results/stats/default/pluralsight.pcap.out b/test/results/stats/default/pluralsight.pcap.out
index 9b8437306..ebe9b870d 100644
--- a/test/results/stats/default/pluralsight.pcap.out
+++ b/test/results/stats/default/pluralsight.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:59
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:73347
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:73341
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/pop3.pcap.out b/test/results/stats/default/pop3.pcap.out
index fc43d0bfb..a32958d14 100644
--- a/test/results/stats/default/pop3.pcap.out
+++ b/test/results/stats/default/pop3.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:53
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39538
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:39530
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/pop3_stls.pcap.out b/test/results/stats/default/pop3_stls.pcap.out
index a0fd74ac2..93760e8f1 100644
--- a/test/results/stats/default/pop3_stls.pcap.out
+++ b/test/results/stats/default/pop3_stls.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13668
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13662
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/pops.pcapng.out b/test/results/stats/default/pops.pcapng.out
index 07cd48af6..c390e9635 100644
--- a/test/results/stats/default/pops.pcapng.out
+++ b/test/results/stats/default/pops.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12204
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12198
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/portable_executable.pcap.out b/test/results/stats/default/portable_executable.pcap.out
new file mode 100644
index 000000000..704bebc43
--- /dev/null
+++ b/test/results/stats/default/portable_executable.pcap.out
@@ -0,0 +1,169 @@
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18073
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:11308
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:11308
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:10
+PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-reconnect_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-shutdown_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-status_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_unknown_datalink" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_unknown_l3_protocol" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_unsupported_datalink" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_packet_type_unknown" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_packet_header_invalid" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip4_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip4_size_smaller_than_header" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip4_l4_payload_detection" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip6_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip6_size_smaller_than_header" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip6_l4_payload_detection" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_tcp_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_udp_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_capture_size_smaller_than_packet" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_max_flows_to_track" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_flow_memory_alloc" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_safe_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unsafe_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_potentially_dangerous_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_tracker_ads_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_dangerous_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unrated_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unknown_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_unspecified_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_media_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_vpn_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_email_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_data_transfer_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_web_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_social_network_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_download_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_game_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_chat_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_voip_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_database_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_remote_access_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_cloud_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_network_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_collaborative_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_rpc_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_streaming_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_system_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_software_update_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_music_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_video_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_shopping_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_productivity_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_file_sharing_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_conn_check_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_iot_scada_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_virt_assistant_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_cybersecurity_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_adult_content_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_mining_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_malware_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_advertisment_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_banned_site_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_site_unavail_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_allowed_site_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_antimalware_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_crypto_currency_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_gambling_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_unknown_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_port" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_partial" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_partial_cache" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_cache" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_nbpf" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l3_ip4_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l3_ip6_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l3_other_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_tcp_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_udp_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_icmp_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_other_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_unknown_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_active_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_detected_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_guessed_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_9_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_10_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_11_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_12_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_13_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_14_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_15_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_16_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_17_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_18_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_19_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_20_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_21_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_22_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_23_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_24_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_25_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_26_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_27_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_28_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_29_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_30_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_31_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_32_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_33_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_34_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_35_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_36_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_37_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_38_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_39_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_40_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_41_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
diff --git a/test/results/stats/default/pps.pcap.out b/test/results/stats/default/pps.pcap.out
index cea56f29d..c97b947c3 100644
--- a/test/results/stats/default/pps.pcap.out
+++ b/test/results/stats/default/pps.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:701
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:728606
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:729652
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:107
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:105
@@ -94,10 +94,10 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:33
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:13
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:40
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:9
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
@@ -116,7 +116,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:29
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:9
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:11
diff --git a/test/results/stats/default/pptp.pcap.out b/test/results/stats/default/pptp.pcap.out
index 978045a43..52e22e789 100644
--- a/test/results/stats/default/pptp.pcap.out
+++ b/test/results/stats/default/pptp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7513
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7507
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/profinet-io-le.pcap.out b/test/results/stats/default/profinet-io-le.pcap.out
index a33174db7..10f4c8df1 100644
--- a/test/results/stats/default/profinet-io-le.pcap.out
+++ b/test/results/stats/default/profinet-io-le.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6551
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6545
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/protobuf.pcap.out b/test/results/stats/default/protobuf.pcap.out
index f7d4d1ddd..51dfa9116 100644
--- a/test/results/stats/default/protobuf.pcap.out
+++ b/test/results/stats/default/protobuf.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:47
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32576
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32562
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/protonvpn.pcap.out b/test/results/stats/default/protonvpn.pcap.out
index a89215ea5..840fecaa4 100644
--- a/test/results/stats/default/protonvpn.pcap.out
+++ b/test/results/stats/default/protonvpn.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:25
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19871
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19865
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/psiphon3.pcap.out b/test/results/stats/default/psiphon3.pcap.out
index 6aeb63e8d..f1b491670 100644
--- a/test/results/stats/default/psiphon3.pcap.out
+++ b/test/results/stats/default/psiphon3.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13634
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13628
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/ptpv2.pcap.out b/test/results/stats/default/ptpv2.pcap.out
index 8917e4839..e26003809 100644
--- a/test/results/stats/default/ptpv2.pcap.out
+++ b/test/results/stats/default/ptpv2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:23
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16994
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16988
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/punycode-idn.pcap.out b/test/results/stats/default/punycode-idn.pcap.out
index 0b4f4a01c..9a6c20f5e 100644
--- a/test/results/stats/default/punycode-idn.pcap.out
+++ b/test/results/stats/default/punycode-idn.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:24
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20074
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20068
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/quic-23.pcap.out b/test/results/stats/default/quic-23.pcap.out
index d727cfb86..4332c750d 100644
--- a/test/results/stats/default/quic-23.pcap.out
+++ b/test/results/stats/default/quic-23.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13168
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13162
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-24.pcap.out b/test/results/stats/default/quic-24.pcap.out
index 3a2f73b73..21dca8cd6 100644
--- a/test/results/stats/default/quic-24.pcap.out
+++ b/test/results/stats/default/quic-24.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12876
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12870
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-27.pcap.out b/test/results/stats/default/quic-27.pcap.out
index 0fa07dd2f..b3da5a30d 100644
--- a/test/results/stats/default/quic-27.pcap.out
+++ b/test/results/stats/default/quic-27.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16842
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16836
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-28.pcap.out b/test/results/stats/default/quic-28.pcap.out
index b38f0e8e7..9ee5e2674 100644
--- a/test/results/stats/default/quic-28.pcap.out
+++ b/test/results/stats/default/quic-28.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13270
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13264
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-29.pcap.out b/test/results/stats/default/quic-29.pcap.out
index 23517078c..8efb95641 100644
--- a/test/results/stats/default/quic-29.pcap.out
+++ b/test/results/stats/default/quic-29.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12869
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12863
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-33.pcapng.out b/test/results/stats/default/quic-33.pcapng.out
index de4bd8dc2..52bb4f7a2 100644
--- a/test/results/stats/default/quic-33.pcapng.out
+++ b/test/results/stats/default/quic-33.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14747
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14741
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-34.pcap.out b/test/results/stats/default/quic-34.pcap.out
index e9997bcdc..cc4f87319 100644
--- a/test/results/stats/default/quic-34.pcap.out
+++ b/test/results/stats/default/quic-34.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14125
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14119
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-forcing-vn-with-data.pcapng.out b/test/results/stats/default/quic-forcing-vn-with-data.pcapng.out
index a49ff2556..977107d31 100644
--- a/test/results/stats/default/quic-forcing-vn-with-data.pcapng.out
+++ b/test/results/stats/default/quic-forcing-vn-with-data.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14641
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14635
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-fuzz-overflow.pcapng.out b/test/results/stats/default/quic-fuzz-overflow.pcapng.out
index 70dae0a18..9a0efd0e6 100644
--- a/test/results/stats/default/quic-fuzz-overflow.pcapng.out
+++ b/test/results/stats/default/quic-fuzz-overflow.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8266
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8260
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-mvfst-22.pcap.out b/test/results/stats/default/quic-mvfst-22.pcap.out
index 64114c6be..d4b89adfc 100644
--- a/test/results/stats/default/quic-mvfst-22.pcap.out
+++ b/test/results/stats/default/quic-mvfst-22.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15285
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15281
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-mvfst-22_decryption_error.pcap.out b/test/results/stats/default/quic-mvfst-22_decryption_error.pcap.out
index e030861b7..3255df7cf 100644
--- a/test/results/stats/default/quic-mvfst-22_decryption_error.pcap.out
+++ b/test/results/stats/default/quic-mvfst-22_decryption_error.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10266
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10260
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-mvfst-27.pcapng.out b/test/results/stats/default/quic-mvfst-27.pcapng.out
index bde3d4e19..7bc3d5dff 100644
--- a/test/results/stats/default/quic-mvfst-27.pcapng.out
+++ b/test/results/stats/default/quic-mvfst-27.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15580
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15576
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-mvfst-exp.pcap.out b/test/results/stats/default/quic-mvfst-exp.pcap.out
index 1ccce59fa..0ea1926c6 100644
--- a/test/results/stats/default/quic-mvfst-exp.pcap.out
+++ b/test/results/stats/default/quic-mvfst-exp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15355
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15349
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic-v2.pcapng.out b/test/results/stats/default/quic-v2.pcapng.out
index 4358816c7..9d97d5e56 100644
--- a/test/results/stats/default/quic-v2.pcapng.out
+++ b/test/results/stats/default/quic-v2.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14511
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14505
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic.pcap.out b/test/results/stats/default/quic.pcap.out
index 9d5e4179a..52e2d64d3 100644
--- a/test/results/stats/default/quic.pcap.out
+++ b/test/results/stats/default/quic.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:80
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:115600
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:115588
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:10
diff --git a/test/results/stats/default/quic046.pcap.out b/test/results/stats/default/quic046.pcap.out
index ab62bb7ee..b7ba6ec75 100644
--- a/test/results/stats/default/quic046.pcap.out
+++ b/test/results/stats/default/quic046.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12575
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12569
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic_0RTT.pcap.out b/test/results/stats/default/quic_0RTT.pcap.out
index cf1720522..9cd93cd42 100644
--- a/test/results/stats/default/quic_0RTT.pcap.out
+++ b/test/results/stats/default/quic_0RTT.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:17
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20112
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20104
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/quic_cc_ack.pcapng.out b/test/results/stats/default/quic_cc_ack.pcapng.out
index 7b90ede58..9f98a7389 100644
--- a/test/results/stats/default/quic_cc_ack.pcapng.out
+++ b/test/results/stats/default/quic_cc_ack.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12110
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12104
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/quic_crypto_aes_auth_size.pcap.out b/test/results/stats/default/quic_crypto_aes_auth_size.pcap.out
index 371032cce..e6b051206 100644
--- a/test/results/stats/default/quic_crypto_aes_auth_size.pcap.out
+++ b/test/results/stats/default/quic_crypto_aes_auth_size.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12786
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12780
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/quic_frags_ch_in_multiple_packets.pcapng.out b/test/results/stats/default/quic_frags_ch_in_multiple_packets.pcapng.out
index 267499533..529198758 100644
--- a/test/results/stats/default/quic_frags_ch_in_multiple_packets.pcapng.out
+++ b/test/results/stats/default/quic_frags_ch_in_multiple_packets.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14576
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14570
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out b/test/results/stats/default/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out
index 54a71bb7f..3613ce81c 100644
--- a/test/results/stats/default/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out
+++ b/test/results/stats/default/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:667
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:941886
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:941834
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:113
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:113
diff --git a/test/results/stats/default/quic_frags_different_dcid.pcapng.out b/test/results/stats/default/quic_frags_different_dcid.pcapng.out
index d7622a37f..ac5f8de86 100644
--- a/test/results/stats/default/quic_frags_different_dcid.pcapng.out
+++ b/test/results/stats/default/quic_frags_different_dcid.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13591
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13585
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic_interop_V.pcapng.out b/test/results/stats/default/quic_interop_V.pcapng.out
index d07c7a678..baa67e773 100644
--- a/test/results/stats/default/quic_interop_V.pcapng.out
+++ b/test/results/stats/default/quic_interop_V.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:471
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:631383
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:631377
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:77
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:77
diff --git a/test/results/stats/default/quic_q39.pcap.out b/test/results/stats/default/quic_q39.pcap.out
index cc89659f6..45555e63c 100644
--- a/test/results/stats/default/quic_q39.pcap.out
+++ b/test/results/stats/default/quic_q39.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14826
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14820
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic_q43.pcap.out b/test/results/stats/default/quic_q43.pcap.out
index c5baa4663..eef98e492 100644
--- a/test/results/stats/default/quic_q43.pcap.out
+++ b/test/results/stats/default/quic_q43.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:8
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7547
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7541
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic_q46.pcap.out b/test/results/stats/default/quic_q46.pcap.out
index 7a1679a5a..5c3f9a86b 100644
--- a/test/results/stats/default/quic_q46.pcap.out
+++ b/test/results/stats/default/quic_q46.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14673
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14667
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic_q46_b.pcap.out b/test/results/stats/default/quic_q46_b.pcap.out
index 380526378..cdf30824c 100644
--- a/test/results/stats/default/quic_q46_b.pcap.out
+++ b/test/results/stats/default/quic_q46_b.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11481
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11475
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic_q50.pcap.out b/test/results/stats/default/quic_q50.pcap.out
index 8b8fc119d..ae2652295 100644
--- a/test/results/stats/default/quic_q50.pcap.out
+++ b/test/results/stats/default/quic_q50.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12961
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12955
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic_t50.pcap.out b/test/results/stats/default/quic_t50.pcap.out
index 2e20984f3..bbdd7b69d 100644
--- a/test/results/stats/default/quic_t50.pcap.out
+++ b/test/results/stats/default/quic_t50.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15377
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15371
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quic_t51.pcap.out b/test/results/stats/default/quic_t51.pcap.out
index da88b8612..8b55720e9 100644
--- a/test/results/stats/default/quic_t51.pcap.out
+++ b/test/results/stats/default/quic_t51.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16728
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16722
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/quickplay.pcap.out b/test/results/stats/default/quickplay.pcap.out
index aedf1068d..8e4ead132 100644
--- a/test/results/stats/default/quickplay.pcap.out
+++ b/test/results/stats/default/quickplay.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:145
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:170573
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:170719
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:21
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:19
@@ -95,9 +95,9 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:3
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:11
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:15
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
@@ -116,7 +116,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:11
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:4
diff --git a/test/results/stats/default/radius_false_positive.pcapng.out b/test/results/stats/default/radius_false_positive.pcapng.out
index d7a9a987d..af1642904 100644
--- a/test/results/stats/default/radius_false_positive.pcapng.out
+++ b/test/results/stats/default/radius_false_positive.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11593
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11587
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/radmin3.pcapng.out b/test/results/stats/default/radmin3.pcapng.out
index 33f25c15e..af939f013 100644
--- a/test/results/stats/default/radmin3.pcapng.out
+++ b/test/results/stats/default/radmin3.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13305
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13299
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/raft.pcap.out b/test/results/stats/default/raft.pcap.out
index 0b0aaf181..a069bffec 100644
--- a/test/results/stats/default/raft.pcap.out
+++ b/test/results/stats/default/raft.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17037
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17031
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/raknet.pcap.out b/test/results/stats/default/raknet.pcap.out
index ccfd212be..8cc419b6d 100644
--- a/test/results/stats/default/raknet.pcap.out
+++ b/test/results/stats/default/raknet.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:95
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:80650
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:80642
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:12
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:12
diff --git a/test/results/stats/default/rdp.pcap.out b/test/results/stats/default/rdp.pcap.out
index 06e32a994..166b533c9 100644
--- a/test/results/stats/default/rdp.pcap.out
+++ b/test/results/stats/default/rdp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7478
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7472
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/rdp2.pcap.out b/test/results/stats/default/rdp2.pcap.out
index 67ffcc0d1..c06e467eb 100644
--- a/test/results/stats/default/rdp2.pcap.out
+++ b/test/results/stats/default/rdp2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:29
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29548
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29538
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/rdp3.pcap.out b/test/results/stats/default/rdp3.pcap.out
index db969bd1a..1420718c0 100644
--- a/test/results/stats/default/rdp3.pcap.out
+++ b/test/results/stats/default/rdp3.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7558
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7552
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/reasm_crash_anon.pcapng.out b/test/results/stats/default/reasm_crash_anon.pcapng.out
index 5ad7590be..4be719268 100644
--- a/test/results/stats/default/reasm_crash_anon.pcapng.out
+++ b/test/results/stats/default/reasm_crash_anon.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10719
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10709
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/reasm_segv_anon.pcapng.out b/test/results/stats/default/reasm_segv_anon.pcapng.out
index e42cb55a4..3a9a8dbae 100644
--- a/test/results/stats/default/reasm_segv_anon.pcapng.out
+++ b/test/results/stats/default/reasm_segv_anon.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:44
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:27013
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:27007
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/reddit.pcap.out b/test/results/stats/default/reddit.pcap.out
index 870d80b6f..29deba6b6 100644
--- a/test/results/stats/default/reddit.pcap.out
+++ b/test/results/stats/default/reddit.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:582
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:564378
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:564372
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:60
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:23
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:37
diff --git a/test/results/stats/default/resp.pcap.out b/test/results/stats/default/resp.pcap.out
index 266482793..a29cb812b 100644
--- a/test/results/stats/default/resp.pcap.out
+++ b/test/results/stats/default/resp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9533
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9527
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/riot.pcapng.out b/test/results/stats/default/riot.pcapng.out
index bffcaccc8..e19ef8bcf 100644
--- a/test/results/stats/default/riot.pcapng.out
+++ b/test/results/stats/default/riot.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:18
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25237
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25334
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/riotgames.pcap.out b/test/results/stats/default/riotgames.pcap.out
index fa61821e1..2d1c3761f 100644
--- a/test/results/stats/default/riotgames.pcap.out
+++ b/test/results/stats/default/riotgames.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:62
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:45140
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:45118
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:9
diff --git a/test/results/stats/default/rmcp.pcap.out b/test/results/stats/default/rmcp.pcap.out
index d382d4141..309a348c5 100644
--- a/test/results/stats/default/rmcp.pcap.out
+++ b/test/results/stats/default/rmcp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:29
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:22445
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:22435
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/roblox.pcapng.out b/test/results/stats/default/roblox.pcapng.out
index 21a7d88de..790ed762e 100644
--- a/test/results/stats/default/roblox.pcapng.out
+++ b/test/results/stats/default/roblox.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:39
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:43165
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:43155
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/roughtime.pcap.out b/test/results/stats/default/roughtime.pcap.out
index ec8209a02..b1d4bc9c0 100644
--- a/test/results/stats/default/roughtime.pcap.out
+++ b/test/results/stats/default/roughtime.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19260
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19252
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/rsh-syslog-false-positive.pcap.out b/test/results/stats/default/rsh-syslog-false-positive.pcap.out
index 244523d5d..9658da4a6 100644
--- a/test/results/stats/default/rsh-syslog-false-positive.pcap.out
+++ b/test/results/stats/default/rsh-syslog-false-positive.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14744
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14738
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/rsh.pcap.out b/test/results/stats/default/rsh.pcap.out
index 281f1032b..a7c017410 100644
--- a/test/results/stats/default/rsh.pcap.out
+++ b/test/results/stats/default/rsh.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13832
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13826
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/rsync.pcap.out b/test/results/stats/default/rsync.pcap.out
index 40b9ff5d1..0c2d4fe54 100644
--- a/test/results/stats/default/rsync.pcap.out
+++ b/test/results/stats/default/rsync.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7322
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7316
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/rtcp_multiple_pkts_in_the_same_datagram.pcap.out b/test/results/stats/default/rtcp_multiple_pkts_in_the_same_datagram.pcap.out
index f983adb06..39f25eb8f 100644
--- a/test/results/stats/default/rtcp_multiple_pkts_in_the_same_datagram.pcap.out
+++ b/test/results/stats/default/rtcp_multiple_pkts_in_the_same_datagram.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8241
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8235
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/rtmp.pcap.out b/test/results/stats/default/rtmp.pcap.out
index ba049fe86..09dcfbd8f 100644
--- a/test/results/stats/default/rtmp.pcap.out
+++ b/test/results/stats/default/rtmp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9233
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9227
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/rtp.pcapng.out b/test/results/stats/default/rtp.pcapng.out
index b604cf1eb..66a2294ec 100644
--- a/test/results/stats/default/rtp.pcapng.out
+++ b/test/results/stats/default/rtp.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:28
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:27803
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:27795
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/rtps.pcap.out b/test/results/stats/default/rtps.pcap.out
index baa057172..4a55c9bb0 100644
--- a/test/results/stats/default/rtps.pcap.out
+++ b/test/results/stats/default/rtps.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20361
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:20355
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/rtsp.pcap.out b/test/results/stats/default/rtsp.pcap.out
index e61bf5bdc..b99392054 100644
--- a/test/results/stats/default/rtsp.pcap.out
+++ b/test/results/stats/default/rtsp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:65
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:55816
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:55810
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/rtsp_setup_http.pcapng.out b/test/results/stats/default/rtsp_setup_http.pcapng.out
index 7ad34b77d..241a41af0 100644
--- a/test/results/stats/default/rtsp_setup_http.pcapng.out
+++ b/test/results/stats/default/rtsp_setup_http.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5646
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:5640
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/rx.pcap.out b/test/results/stats/default/rx.pcap.out
index 8d36a64f2..2074d8cc6 100644
--- a/test/results/stats/default/rx.pcap.out
+++ b/test/results/stats/default/rx.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:40
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33264
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:33258
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/s7comm-plus.pcap.out b/test/results/stats/default/s7comm-plus.pcap.out
index fac64a2df..431d7148f 100644
--- a/test/results/stats/default/s7comm-plus.pcap.out
+++ b/test/results/stats/default/s7comm-plus.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9495
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9489
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/s7comm.pcap.out b/test/results/stats/default/s7comm.pcap.out
index ea24b0337..29d3ba24d 100644
--- a/test/results/stats/default/s7comm.pcap.out
+++ b/test/results/stats/default/s7comm.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9520
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9514
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/safari.pcap.out b/test/results/stats/default/safari.pcap.out
index 925e27f44..840c8cba2 100644
--- a/test/results/stats/default/safari.pcap.out
+++ b/test/results/stats/default/safari.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:69
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:59779
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:59773
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/salesforce.pcap.out b/test/results/stats/default/salesforce.pcap.out
index b870cf627..d70ddf630 100644
--- a/test/results/stats/default/salesforce.pcap.out
+++ b/test/results/stats/default/salesforce.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11289
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11283
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/sccp_hw_conf_register.pcapng.out b/test/results/stats/default/sccp_hw_conf_register.pcapng.out
index ab5acac43..fa176c860 100644
--- a/test/results/stats/default/sccp_hw_conf_register.pcapng.out
+++ b/test/results/stats/default/sccp_hw_conf_register.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7621
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7615
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/sctp.cap.out b/test/results/stats/default/sctp.cap.out
index 514065faf..90f6540b3 100644
--- a/test/results/stats/default/sctp.cap.out
+++ b/test/results/stats/default/sctp.cap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9272
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9266
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/selfsigned.pcap.out b/test/results/stats/default/selfsigned.pcap.out
index 233674f83..4390e80e6 100644
--- a/test/results/stats/default/selfsigned.pcap.out
+++ b/test/results/stats/default/selfsigned.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10436
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10430
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/sflow.pcap.out b/test/results/stats/default/sflow.pcap.out
index 0389a60ba..369ba9c07 100644
--- a/test/results/stats/default/sflow.pcap.out
+++ b/test/results/stats/default/sflow.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9116
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9110
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/shadowsocks.pcap.out b/test/results/stats/default/shadowsocks.pcap.out
index 2bef3af4b..94a2d6bfc 100644
--- a/test/results/stats/default/shadowsocks.pcap.out
+++ b/test/results/stats/default/shadowsocks.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12908
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12902
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/shell.pcap.out b/test/results/stats/default/shell.pcap.out
new file mode 100644
index 000000000..8922c35ba
--- /dev/null
+++ b/test/results/stats/default/shell.pcap.out
@@ -0,0 +1,169 @@
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:27
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:35278
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:12250
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:12
+PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-reconnect_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-shutdown_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-status_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_unknown_datalink" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_unknown_l3_protocol" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_unsupported_datalink" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_packet_type_unknown" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_packet_header_invalid" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip4_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip4_size_smaller_than_header" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip4_l4_payload_detection" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip6_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip6_size_smaller_than_header" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_ip6_l4_payload_detection" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_tcp_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_udp_packet_too_short" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_capture_size_smaller_than_packet" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_max_flows_to_track" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/counter-error_flow_memory_alloc" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_safe_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_acceptable_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_fun_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unsafe_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_potentially_dangerous_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_tracker_ads_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_dangerous_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unrated_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_breed_unknown_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_unspecified_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_media_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_vpn_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_email_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_data_transfer_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_web_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_social_network_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_download_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_game_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_chat_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_voip_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_database_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_remote_access_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_cloud_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_network_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_collaborative_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_rpc_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_streaming_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_system_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_software_update_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_music_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_video_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_shopping_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_productivity_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_file_sharing_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_conn_check_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_iot_scada_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_virt_assistant_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_cybersecurity_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_adult_content_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_mining_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_malware_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_advertisment_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_banned_site_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_site_unavail_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_allowed_site_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_antimalware_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_crypto_currency_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_gambling_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_unknown_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_port" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_partial" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_partial_cache" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_cache" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_nbpf" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l3_ip4_count" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l3_ip6_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l3_other_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_tcp_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_udp_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_icmp_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_l4_other_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_unknown_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_active_count" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_detected_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_guessed_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_9_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_10_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_11_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_12_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_13_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_14_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_15_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_16_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_17_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_18_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_19_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_20_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_21_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_22_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_23_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_24_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_25_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_26_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_27_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_28_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_29_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_30_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_31_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_32_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_33_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_34_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_35_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_36_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_37_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_38_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_39_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_40_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_41_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
diff --git a/test/results/stats/default/signal.pcap.out b/test/results/stats/default/signal.pcap.out
index 5b91e6783..126deaa50 100644
--- a/test/results/stats/default/signal.pcap.out
+++ b/test/results/stats/default/signal.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:175
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:160815
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:160809
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:19
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:10
diff --git a/test/results/stats/default/simple-dnscrypt.pcap.out b/test/results/stats/default/simple-dnscrypt.pcap.out
index 54fbc430c..a73d005f2 100644
--- a/test/results/stats/default/simple-dnscrypt.pcap.out
+++ b/test/results/stats/default/simple-dnscrypt.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:45
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:42109
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:42103
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/sip.pcap.out b/test/results/stats/default/sip.pcap.out
index 5a247d7c5..defce9cbb 100644
--- a/test/results/stats/default/sip.pcap.out
+++ b/test/results/stats/default/sip.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:59
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:57867
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:57857
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/sip_hello.pcapng.out b/test/results/stats/default/sip_hello.pcapng.out
index 8b2b9af1c..f2b77e8dd 100644
--- a/test/results/stats/default/sip_hello.pcapng.out
+++ b/test/results/stats/default/sip_hello.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15571
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15565
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/sites.pcapng.out b/test/results/stats/default/sites.pcapng.out
index 7bee1f593..f29c2d618 100644
--- a/test/results/stats/default/sites.pcapng.out
+++ b/test/results/stats/default/sites.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:488
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:535678
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:535642
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:56
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:47
diff --git a/test/results/stats/default/skinny.pcap.out b/test/results/stats/default/skinny.pcap.out
index 5f054b795..7b510470f 100644
--- a/test/results/stats/default/skinny.pcap.out
+++ b/test/results/stats/default/skinny.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:61
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:50806
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:50800
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/skype-conference-call.pcap.out b/test/results/stats/default/skype-conference-call.pcap.out
index 436ca3256..454e5c7fd 100644
--- a/test/results/stats/default/skype-conference-call.pcap.out
+++ b/test/results/stats/default/skype-conference-call.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10595
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10589
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/smb_deletefile.pcap.out b/test/results/stats/default/smb_deletefile.pcap.out
index 64ca33395..20d4d56b7 100644
--- a/test/results/stats/default/smb_deletefile.pcap.out
+++ b/test/results/stats/default/smb_deletefile.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11914
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11908
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/smb_frags.pcap.out b/test/results/stats/default/smb_frags.pcap.out
index 974aee9fd..93dabc02a 100644
--- a/test/results/stats/default/smb_frags.pcap.out
+++ b/test/results/stats/default/smb_frags.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10318
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10312
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/smbv1.pcap.out b/test/results/stats/default/smbv1.pcap.out
index 4657b9472..d1d0170c8 100644
--- a/test/results/stats/default/smbv1.pcap.out
+++ b/test/results/stats/default/smbv1.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8872
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8866
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/smpp_in_general.pcap.out b/test/results/stats/default/smpp_in_general.pcap.out
index 3c50ba9a1..ce3a15b81 100644
--- a/test/results/stats/default/smpp_in_general.pcap.out
+++ b/test/results/stats/default/smpp_in_general.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7424
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7418
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/smtp-starttls.pcap.out b/test/results/stats/default/smtp-starttls.pcap.out
index 3e15f993b..e40a56bf3 100644
--- a/test/results/stats/default/smtp-starttls.pcap.out
+++ b/test/results/stats/default/smtp-starttls.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:28
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26291
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26283
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/smtp.pcap.out b/test/results/stats/default/smtp.pcap.out
index 63a97df82..fe3bef1fa 100644
--- a/test/results/stats/default/smtp.pcap.out
+++ b/test/results/stats/default/smtp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9538
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9532
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/smtps.pcapng.out b/test/results/stats/default/smtps.pcapng.out
index 413b06912..0ed20ba94 100644
--- a/test/results/stats/default/smtps.pcapng.out
+++ b/test/results/stats/default/smtps.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9321
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9315
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/snapchat.pcap.out b/test/results/stats/default/snapchat.pcap.out
index c15e2835f..9bd8bc126 100644
--- a/test/results/stats/default/snapchat.pcap.out
+++ b/test/results/stats/default/snapchat.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:30
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25012
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25006
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/snapchat_call.pcapng.out b/test/results/stats/default/snapchat_call.pcapng.out
index f075ecc96..578a08dd9 100644
--- a/test/results/stats/default/snapchat_call.pcapng.out
+++ b/test/results/stats/default/snapchat_call.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19123
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19117
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/snapchat_call_v1.pcapng.out b/test/results/stats/default/snapchat_call_v1.pcapng.out
index f7b7423ac..b7ef3f0ad 100644
--- a/test/results/stats/default/snapchat_call_v1.pcapng.out
+++ b/test/results/stats/default/snapchat_call_v1.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18212
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18206
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/snmp.pcap.out b/test/results/stats/default/snmp.pcap.out
index 91a3c9ae8..8871c5ee6 100644
--- a/test/results/stats/default/snmp.pcap.out
+++ b/test/results/stats/default/snmp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:139
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:115549
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:115537
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:17
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:17
diff --git a/test/results/stats/default/soap.pcap.out b/test/results/stats/default/soap.pcap.out
index ed0fc65e6..afe2a63e7 100644
--- a/test/results/stats/default/soap.pcap.out
+++ b/test/results/stats/default/soap.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:24
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:27572
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:27564
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/socks.pcap.out b/test/results/stats/default/socks.pcap.out
index 498537f9e..be5dcc497 100644
--- a/test/results/stats/default/socks.pcap.out
+++ b/test/results/stats/default/socks.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:36
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24629
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24621
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/softether.pcap.out b/test/results/stats/default/softether.pcap.out
index 8b4c0453b..a0b573d24 100644
--- a/test/results/stats/default/softether.pcap.out
+++ b/test/results/stats/default/softether.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:107
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:91835
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:91807
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/someip-tp.pcap.out b/test/results/stats/default/someip-tp.pcap.out
index b92b7e59f..87a679903 100644
--- a/test/results/stats/default/someip-tp.pcap.out
+++ b/test/results/stats/default/someip-tp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17014
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17008
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/someip-udp-method-call.pcapng.out b/test/results/stats/default/someip-udp-method-call.pcapng.out
index 2e54c8e6f..8f5988a76 100644
--- a/test/results/stats/default/someip-udp-method-call.pcapng.out
+++ b/test/results/stats/default/someip-udp-method-call.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10038
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10032
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/someip_sd_sample.pcap.out b/test/results/stats/default/someip_sd_sample.pcap.out
index da53f1a4e..b613d9c5c 100644
--- a/test/results/stats/default/someip_sd_sample.pcap.out
+++ b/test/results/stats/default/someip_sd_sample.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6558
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6552
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/source_engine.pcap.out b/test/results/stats/default/source_engine.pcap.out
index 7bd1f461e..05b27c953 100644
--- a/test/results/stats/default/source_engine.pcap.out
+++ b/test/results/stats/default/source_engine.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:85
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:68671
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:68647
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:17
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:17
diff --git a/test/results/stats/default/spotify_tcp.pcap.out b/test/results/stats/default/spotify_tcp.pcap.out
index c0d1b277a..9bf2cb50d 100644
--- a/test/results/stats/default/spotify_tcp.pcap.out
+++ b/test/results/stats/default/spotify_tcp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6894
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6890
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/sql_injection.pcap.out b/test/results/stats/default/sql_injection.pcap.out
index 3ed09691d..d59a8dbe1 100644
--- a/test/results/stats/default/sql_injection.pcap.out
+++ b/test/results/stats/default/sql_injection.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11382
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11376
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/srvloc-v1.pcapng.out b/test/results/stats/default/srvloc-v1.pcapng.out
index 9e05b5607..f0d50acb2 100644
--- a/test/results/stats/default/srvloc-v1.pcapng.out
+++ b/test/results/stats/default/srvloc-v1.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8958
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8952
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/srvloc.pcap.out b/test/results/stats/default/srvloc.pcap.out
index 689b1f4a4..e260e2592 100644
--- a/test/results/stats/default/srvloc.pcap.out
+++ b/test/results/stats/default/srvloc.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:3001
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:2440231
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:2439419
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:621
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:621
diff --git a/test/results/stats/default/ssdp-m-search-ua.pcap.out b/test/results/stats/default/ssdp-m-search-ua.pcap.out
index 505e64248..172f0d380 100644
--- a/test/results/stats/default/ssdp-m-search-ua.pcap.out
+++ b/test/results/stats/default/ssdp-m-search-ua.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7720
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7714
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ssdp-m-search.pcap.out b/test/results/stats/default/ssdp-m-search.pcap.out
index 1f1230a07..6855b527a 100644
--- a/test/results/stats/default/ssdp-m-search.pcap.out
+++ b/test/results/stats/default/ssdp-m-search.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8402
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8396
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/ssh.pcap.out b/test/results/stats/default/ssh.pcap.out
index cf4d3d92e..334e65093 100644
--- a/test/results/stats/default/ssh.pcap.out
+++ b/test/results/stats/default/ssh.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:16
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15535
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15529
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/ssl-cert-name-mismatch.pcap.out b/test/results/stats/default/ssl-cert-name-mismatch.pcap.out
index e0cf18760..490e4c97e 100644
--- a/test/results/stats/default/ssl-cert-name-mismatch.pcap.out
+++ b/test/results/stats/default/ssl-cert-name-mismatch.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10908
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10902
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/starcraft_battle.pcap.out b/test/results/stats/default/starcraft_battle.pcap.out
index 7bec40785..25ecb0f6a 100644
--- a/test/results/stats/default/starcraft_battle.pcap.out
+++ b/test/results/stats/default/starcraft_battle.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:383
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:296740
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:296791
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:52
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:26
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:26
@@ -95,9 +95,9 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:9
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
@@ -116,7 +116,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:1
diff --git a/test/results/stats/default/steam.pcapng.out b/test/results/stats/default/steam.pcapng.out
index 8593bb541..17fca8c0d 100644
--- a/test/results/stats/default/steam.pcapng.out
+++ b/test/results/stats/default/steam.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:59
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:50697
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:50691
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:6
diff --git a/test/results/stats/default/stomp.pcapng.out b/test/results/stats/default/stomp.pcapng.out
index c1c30b43e..a2fa55aa3 100644
--- a/test/results/stats/default/stomp.pcapng.out
+++ b/test/results/stats/default/stomp.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7378
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7372
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/stun.pcap.out b/test/results/stats/default/stun.pcap.out
index 55a6766c5..f08c4a4fe 100644
--- a/test/results/stats/default/stun.pcap.out
+++ b/test/results/stats/default/stun.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:89
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:76168
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:76148
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:8
diff --git a/test/results/stats/default/stun_classic.pcap.out b/test/results/stats/default/stun_classic.pcap.out
index b3a8ababf..c69b033d1 100644
--- a/test/results/stats/default/stun_classic.pcap.out
+++ b/test/results/stats/default/stun_classic.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8806
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:8800
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/stun_dtls_rtp.pcapng.out b/test/results/stats/default/stun_dtls_rtp.pcapng.out
index 903ef8005..4c77604b3 100644
--- a/test/results/stats/default/stun_dtls_rtp.pcapng.out
+++ b/test/results/stats/default/stun_dtls_rtp.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12223
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12217
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/stun_dtls_rtp_unidir.pcapng.out b/test/results/stats/default/stun_dtls_rtp_unidir.pcapng.out
index 73a8f74d8..66d186c90 100644
--- a/test/results/stats/default/stun_dtls_rtp_unidir.pcapng.out
+++ b/test/results/stats/default/stun_dtls_rtp_unidir.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17361
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17355
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/stun_dtls_unidirectional_client.pcap.out b/test/results/stats/default/stun_dtls_unidirectional_client.pcap.out
index 56bd3f0b4..e4b42e183 100644
--- a/test/results/stats/default/stun_dtls_unidirectional_client.pcap.out
+++ b/test/results/stats/default/stun_dtls_unidirectional_client.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12062
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12056
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/stun_dtls_unidirectional_server.pcap.out b/test/results/stats/default/stun_dtls_unidirectional_server.pcap.out
index 23cea237e..b784e412b 100644
--- a/test/results/stats/default/stun_dtls_unidirectional_server.pcap.out
+++ b/test/results/stats/default/stun_dtls_unidirectional_server.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12217
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12211
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/stun_google_meet.pcapng.out b/test/results/stats/default/stun_google_meet.pcapng.out
index 9ea3dd536..c3841fe5b 100644
--- a/test/results/stats/default/stun_google_meet.pcapng.out
+++ b/test/results/stats/default/stun_google_meet.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:71
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:63366
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:63358
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/stun_msteams_unidir.pcapng.out b/test/results/stats/default/stun_msteams_unidir.pcapng.out
index a63f3fdab..5697a2984 100644
--- a/test/results/stats/default/stun_msteams_unidir.pcapng.out
+++ b/test/results/stats/default/stun_msteams_unidir.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11199
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11193
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/stun_signal.pcapng.out b/test/results/stats/default/stun_signal.pcapng.out
index dc065ae08..55f35e993 100644
--- a/test/results/stats/default/stun_signal.pcapng.out
+++ b/test/results/stats/default/stun_signal.pcapng.out
@@ -1,5 +1,5 @@
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:211
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:169746
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:229
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:190798
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:23
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:23
@@ -7,11 +7,11 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:15
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:23
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:8
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:26
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:13408
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:16192
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:15
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:17
PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:113
PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1
@@ -94,8 +94,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:4
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:21
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:14
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:35
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
@@ -117,7 +117,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:21
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:35
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
@@ -158,7 +158,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:6
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:16
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0
diff --git a/test/results/stats/default/stun_tcp_multiple_msgs_same_pkt.pcap.out b/test/results/stats/default/stun_tcp_multiple_msgs_same_pkt.pcap.out
index c48afc302..44e1fef09 100644
--- a/test/results/stats/default/stun_tcp_multiple_msgs_same_pkt.pcap.out
+++ b/test/results/stats/default/stun_tcp_multiple_msgs_same_pkt.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7830
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7824
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/stun_wa_call.pcapng.out b/test/results/stats/default/stun_wa_call.pcapng.out
index 478255038..7ff971c32 100644
--- a/test/results/stats/default/stun_wa_call.pcapng.out
+++ b/test/results/stats/default/stun_wa_call.pcapng.out
@@ -1,5 +1,5 @@
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:130
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:113256
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:132
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:115689
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:13
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:13
@@ -7,7 +7,7 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:20
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:22
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:44019
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:64856
@@ -94,8 +94,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:10
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:11
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
@@ -117,7 +117,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
@@ -158,7 +158,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:10
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:11
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0
diff --git a/test/results/stats/default/stun_zoom.pcapng.out b/test/results/stats/default/stun_zoom.pcapng.out
index 4d3a180f7..46488e9f5 100644
--- a/test/results/stats/default/stun_zoom.pcapng.out
+++ b/test/results/stats/default/stun_zoom.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:27
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25766
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:25760
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/syncthing.pcap.out b/test/results/stats/default/syncthing.pcap.out
index 1305d2634..988ce6564 100644
--- a/test/results/stats/default/syncthing.pcap.out
+++ b/test/results/stats/default/syncthing.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:40
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:37389
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:37383
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/synscan.pcap.out b/test/results/stats/default/synscan.pcap.out
index 220ab72b2..87395ba98 100644
--- a/test/results/stats/default/synscan.pcap.out
+++ b/test/results/stats/default/synscan.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7996
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6243798
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6243792
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1994
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1989
diff --git a/test/results/stats/default/syslog.pcap.out b/test/results/stats/default/syslog.pcap.out
index 734daecc3..78924cb6d 100644
--- a/test/results/stats/default/syslog.pcap.out
+++ b/test/results/stats/default/syslog.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:148
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:120580
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:120556
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:19
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:18
diff --git a/test/results/stats/default/tailscale.pcap.out b/test/results/stats/default/tailscale.pcap.out
index 349783155..bbfbe51f4 100644
--- a/test/results/stats/default/tailscale.pcap.out
+++ b/test/results/stats/default/tailscale.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10198
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10192
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/targusdataspeed_false_positives.pcap.out b/test/results/stats/default/targusdataspeed_false_positives.pcap.out
index 9c6f84657..1a72a17f0 100644
--- a/test/results/stats/default/targusdataspeed_false_positives.pcap.out
+++ b/test/results/stats/default/targusdataspeed_false_positives.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10301
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10297
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/tcp_scan.pcapng.out b/test/results/stats/default/tcp_scan.pcapng.out
index 1b420f2b3..71cf63332 100644
--- a/test/results/stats/default/tcp_scan.pcapng.out
+++ b/test/results/stats/default/tcp_scan.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:42
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:30210
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:30204
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/teams.pcap.out b/test/results/stats/default/teams.pcap.out
index f187e6ec6..88c740a5a 100644
--- a/test/results/stats/default/teams.pcap.out
+++ b/test/results/stats/default/teams.pcap.out
@@ -1,5 +1,5 @@
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:674
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:638720
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:682
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:647764
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:83
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:17
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:66
@@ -7,11 +7,11 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:16
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:80
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:57
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:65
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:293772
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:293323
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:27
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_risky_count" interval=60 N:29
PUTVAL "localhost/exec-nDPIsrvd/counter-packet_count" interval=60 N:16
PUTVAL "localhost/exec-nDPIsrvd/counter-packet_flow_count" interval=60 N:317
PUTVAL "localhost/exec-nDPIsrvd/counter-init_count" interval=60 N:1
@@ -94,8 +94,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:38
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:10
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:42
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:12
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
@@ -117,7 +117,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:10
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:12
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
@@ -158,7 +158,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:1
diff --git a/test/results/stats/default/teamspeak3.pcap.out b/test/results/stats/default/teamspeak3.pcap.out
index eb8c49c8e..5b485b49f 100644
--- a/test/results/stats/default/teamspeak3.pcap.out
+++ b/test/results/stats/default/teamspeak3.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:260
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:218572
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:218370
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/teamviewer.pcap.out b/test/results/stats/default/teamviewer.pcap.out
index d5485db52..bab2f5616 100644
--- a/test/results/stats/default/teamviewer.pcap.out
+++ b/test/results/stats/default/teamviewer.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:23
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:22135
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:22129
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/telegram.pcap.out b/test/results/stats/default/telegram.pcap.out
index fa97868b8..d6fba1413 100644
--- a/test/results/stats/default/telegram.pcap.out
+++ b/test/results/stats/default/telegram.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:340
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:290997
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:290991
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:48
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:48
diff --git a/test/results/stats/default/telegram_videocall.pcapng.out b/test/results/stats/default/telegram_videocall.pcapng.out
index 7023bd2e9..fa0e7f328 100644
--- a/test/results/stats/default/telegram_videocall.pcapng.out
+++ b/test/results/stats/default/telegram_videocall.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:258
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:214813
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:215025
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:34
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:28
@@ -54,11 +54,11 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_social_network_count" interv
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_download_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_game_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_chat_count" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_voip_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_voip_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_database_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_remote_access_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_cloud_count" interval=60 N:1
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_network_count" interval=60 N:23
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_network_count" interval=60 N:19
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_collaborative_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_rpc_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_streaming_count" interval=60 N:0
@@ -87,8 +87,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_category_unknown_count" interval=60 N
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_port" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_partial" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_partial_cache" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_cache" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi" interval=60 N:25
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_cache" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi" interval=60 N:21
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_nbpf" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
diff --git a/test/results/stats/default/telnet.pcap.out b/test/results/stats/default/telnet.pcap.out
index 94ea5b43a..9c79ad0ed 100644
--- a/test/results/stats/default/telnet.pcap.out
+++ b/test/results/stats/default/telnet.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12113
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12107
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/tencent_games.pcap.out b/test/results/stats/default/tencent_games.pcap.out
index 4d4f75951..80005b70e 100644
--- a/test/results/stats/default/tencent_games.pcap.out
+++ b/test/results/stats/default/tencent_games.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:37
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26104
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26094
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/teredo.pcap.out b/test/results/stats/default/teredo.pcap.out
index 01cd6ba02..a64436eab 100644
--- a/test/results/stats/default/teredo.pcap.out
+++ b/test/results/stats/default/teredo.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:33
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24813
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:24807
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/tftp.pcap.out b/test/results/stats/default/tftp.pcap.out
index 7b00f3a0b..c5adb2ac6 100644
--- a/test/results/stats/default/tftp.pcap.out
+++ b/test/results/stats/default/tftp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:50
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:43169
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:43157
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:9
diff --git a/test/results/stats/default/threema.pcap.out b/test/results/stats/default/threema.pcap.out
index 90b77c2a8..af1c28933 100644
--- a/test/results/stats/default/threema.pcap.out
+++ b/test/results/stats/default/threema.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:54
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:37701
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:37689
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/thrift.pcap.out b/test/results/stats/default/thrift.pcap.out
index f63906d92..1230a3f6e 100644
--- a/test/results/stats/default/thrift.pcap.out
+++ b/test/results/stats/default/thrift.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:18
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26122
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26114
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tinc.pcap.out b/test/results/stats/default/tinc.pcap.out
index c919d1d12..25f883f2a 100644
--- a/test/results/stats/default/tinc.pcap.out
+++ b/test/results/stats/default/tinc.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:37
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:40959
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:40953
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/tk.pcap.out b/test/results/stats/default/tk.pcap.out
index adb5e991e..a89232c5b 100644
--- a/test/results/stats/default/tk.pcap.out
+++ b/test/results/stats/default/tk.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16948
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16942
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/tls-appdata.pcap.out b/test/results/stats/default/tls-appdata.pcap.out
index df3a78ce6..fb7860ac9 100644
--- a/test/results/stats/default/tls-appdata.pcap.out
+++ b/test/results/stats/default/tls-appdata.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:27
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29026
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:29012
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls-esni-fuzzed.pcap.out b/test/results/stats/default/tls-esni-fuzzed.pcap.out
index 72f3c975b..491180b07 100644
--- a/test/results/stats/default/tls-esni-fuzzed.pcap.out
+++ b/test/results/stats/default/tls-esni-fuzzed.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15864
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15858
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/tls-rdn-extract.pcap.out b/test/results/stats/default/tls-rdn-extract.pcap.out
index d19bbc0a8..1932096d5 100644
--- a/test/results/stats/default/tls-rdn-extract.pcap.out
+++ b/test/results/stats/default/tls-rdn-extract.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:21041
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:21035
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls_2_reasms.pcapng.out b/test/results/stats/default/tls_2_reasms.pcapng.out
index ae1b42ca2..1b9c288f0 100644
--- a/test/results/stats/default/tls_2_reasms.pcapng.out
+++ b/test/results/stats/default/tls_2_reasms.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11815
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11809
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls_2_reasms_b.pcapng.out b/test/results/stats/default/tls_2_reasms_b.pcapng.out
index e63b22a41..46d8fcd4c 100644
--- a/test/results/stats/default/tls_2_reasms_b.pcapng.out
+++ b/test/results/stats/default/tls_2_reasms_b.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11804
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11798
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls_alert.pcap.out b/test/results/stats/default/tls_alert.pcap.out
index 2bdd8e2d3..1e981d3c4 100644
--- a/test/results/stats/default/tls_alert.pcap.out
+++ b/test/results/stats/default/tls_alert.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15940
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15932
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/tls_certificate_too_long.pcap.out b/test/results/stats/default/tls_certificate_too_long.pcap.out
index 5833e81c9..abf4ed616 100644
--- a/test/results/stats/default/tls_certificate_too_long.pcap.out
+++ b/test/results/stats/default/tls_certificate_too_long.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:252
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:252748
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:253372
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:35
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:11
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:24
@@ -95,7 +95,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:8
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:2
diff --git a/test/results/stats/default/tls_cipher_lens.pcap.out b/test/results/stats/default/tls_cipher_lens.pcap.out
index 2c10f9571..0431d36f2 100644
--- a/test/results/stats/default/tls_cipher_lens.pcap.out
+++ b/test/results/stats/default/tls_cipher_lens.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:23
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:21465
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:21459
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/tls_client_certificate_with_missing_server_one.pcapng.out b/test/results/stats/default/tls_client_certificate_with_missing_server_one.pcapng.out
index 052360187..6efaf36b1 100644
--- a/test/results/stats/default/tls_client_certificate_with_missing_server_one.pcapng.out
+++ b/test/results/stats/default/tls_client_certificate_with_missing_server_one.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19808
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19802
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/tls_ech.pcapng.out b/test/results/stats/default/tls_ech.pcapng.out
index 22d1c534f..8d3824e98 100644
--- a/test/results/stats/default/tls_ech.pcapng.out
+++ b/test/results/stats/default/tls_ech.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10058
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10052
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls_esni_sni_both.pcap.out b/test/results/stats/default/tls_esni_sni_both.pcap.out
index 4dfc19cf9..5ac9c18e6 100644
--- a/test/results/stats/default/tls_esni_sni_both.pcap.out
+++ b/test/results/stats/default/tls_esni_sni_both.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19162
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:19156
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/tls_false_positives.pcapng.out b/test/results/stats/default/tls_false_positives.pcapng.out
index b38c6f622..3b4aaeb04 100644
--- a/test/results/stats/default/tls_false_positives.pcapng.out
+++ b/test/results/stats/default/tls_false_positives.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9705
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9699
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls_invalid_reads.pcap.out b/test/results/stats/default/tls_invalid_reads.pcap.out
index 3b5361597..272a7035b 100644
--- a/test/results/stats/default/tls_invalid_reads.pcap.out
+++ b/test/results/stats/default/tls_invalid_reads.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:25
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17528
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:17518
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/tls_long_cert.pcap.out b/test/results/stats/default/tls_long_cert.pcap.out
index ccfe09374..ad2289484 100644
--- a/test/results/stats/default/tls_long_cert.pcap.out
+++ b/test/results/stats/default/tls_long_cert.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14677
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14671
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/tls_malicious_sha1.pcapng.out b/test/results/stats/default/tls_malicious_sha1.pcapng.out
index 112fdf6ff..fafd66368 100644
--- a/test/results/stats/default/tls_malicious_sha1.pcapng.out
+++ b/test/results/stats/default/tls_malicious_sha1.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11074
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:11068
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls_missing_ch_frag.pcap.out b/test/results/stats/default/tls_missing_ch_frag.pcap.out
index 69cebf005..568a82199 100644
--- a/test/results/stats/default/tls_missing_ch_frag.pcap.out
+++ b/test/results/stats/default/tls_missing_ch_frag.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14627
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14621
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/tls_multiple_synack_different_seq.pcapng.out b/test/results/stats/default/tls_multiple_synack_different_seq.pcapng.out
index ae1919434..82e905bdf 100644
--- a/test/results/stats/default/tls_multiple_synack_different_seq.pcapng.out
+++ b/test/results/stats/default/tls_multiple_synack_different_seq.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12083
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12077
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls_port_80.pcapng.out b/test/results/stats/default/tls_port_80.pcapng.out
index 02dcf6404..1e248bb22 100644
--- a/test/results/stats/default/tls_port_80.pcapng.out
+++ b/test/results/stats/default/tls_port_80.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9816
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9810
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls_torrent.pcapng.out b/test/results/stats/default/tls_torrent.pcapng.out
index 41ea8737e..d1fb9e4af 100644
--- a/test/results/stats/default/tls_torrent.pcapng.out
+++ b/test/results/stats/default/tls_torrent.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15057
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15051
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/tls_unidirectional.pcap.out b/test/results/stats/default/tls_unidirectional.pcap.out
index 262e3ee6a..8b1994114 100644
--- a/test/results/stats/default/tls_unidirectional.pcap.out
+++ b/test/results/stats/default/tls_unidirectional.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:27002
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26994
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/tls_verylong_certificate.pcap.out b/test/results/stats/default/tls_verylong_certificate.pcap.out
index 3e7ce388f..26591b2cf 100644
--- a/test/results/stats/default/tls_verylong_certificate.pcap.out
+++ b/test/results/stats/default/tls_verylong_certificate.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:14
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15966
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:15960
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/toca-boca.pcap.out b/test/results/stats/default/toca-boca.pcap.out
index adb0226ed..06df0bbe6 100644
--- a/test/results/stats/default/toca-boca.pcap.out
+++ b/test/results/stats/default/toca-boca.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:118
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:97740
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:97714
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:21
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:21
diff --git a/test/results/stats/default/tor.pcap.out b/test/results/stats/default/tor.pcap.out
index 20099d460..e06b9949f 100644
--- a/test/results/stats/default/tor.pcap.out
+++ b/test/results/stats/default/tor.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:166
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:117275
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:117267
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:11
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:5
diff --git a/test/results/stats/default/tplink_shp.pcap.out b/test/results/stats/default/tplink_shp.pcap.out
index fbd3bd461..4a6339adb 100644
--- a/test/results/stats/default/tplink_shp.pcap.out
+++ b/test/results/stats/default/tplink_shp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:314
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:295308
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:295296
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:8
diff --git a/test/results/stats/default/trickbot.pcap.out b/test/results/stats/default/trickbot.pcap.out
index 180f027a3..19322423a 100644
--- a/test/results/stats/default/trickbot.pcap.out
+++ b/test/results/stats/default/trickbot.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14086
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:14080
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/tumblr.pcap.out b/test/results/stats/default/tumblr.pcap.out
index fb689727f..adcae378b 100644
--- a/test/results/stats/default/tumblr.pcap.out
+++ b/test/results/stats/default/tumblr.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:329
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:283654
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:283648
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:47
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:46
diff --git a/test/results/stats/default/tunnelbear.pcap.out b/test/results/stats/default/tunnelbear.pcap.out
index 011c41d3a..71b9b47d0 100644
--- a/test/results/stats/default/tunnelbear.pcap.out
+++ b/test/results/stats/default/tunnelbear.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:193
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:171321
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:171315
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:21
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:13
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:8
diff --git a/test/results/stats/default/tuya_lp.pcap.out b/test/results/stats/default/tuya_lp.pcap.out
index 23e270ce7..53bab7d9c 100644
--- a/test/results/stats/default/tuya_lp.pcap.out
+++ b/test/results/stats/default/tuya_lp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:107
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:88255
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:88249
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:13
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:13
diff --git a/test/results/stats/default/ubntac2.pcap.out b/test/results/stats/default/ubntac2.pcap.out
index 39fa6d90d..049388f64 100644
--- a/test/results/stats/default/ubntac2.pcap.out
+++ b/test/results/stats/default/ubntac2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:37
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32053
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32047
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:8
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:8
diff --git a/test/results/stats/default/uftp_v4_v5.pcap.out b/test/results/stats/default/uftp_v4_v5.pcap.out
index 90692308b..54635a242 100644
--- a/test/results/stats/default/uftp_v4_v5.pcap.out
+++ b/test/results/stats/default/uftp_v4_v5.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:29
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26913
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26905
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/ultrasurf.pcap.out b/test/results/stats/default/ultrasurf.pcap.out
index a72a2424f..92cfdf263 100644
--- a/test/results/stats/default/ultrasurf.pcap.out
+++ b/test/results/stats/default/ultrasurf.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:32
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:46228
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:46222
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/umas.pcap.out b/test/results/stats/default/umas.pcap.out
index f9e46c690..88cfabaf5 100644
--- a/test/results/stats/default/umas.pcap.out
+++ b/test/results/stats/default/umas.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:12
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9476
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9470
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/upnp.pcap.out b/test/results/stats/default/upnp.pcap.out
index b852584c9..42122ed0d 100644
--- a/test/results/stats/default/upnp.pcap.out
+++ b/test/results/stats/default/upnp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:19
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:21383
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:21377
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/viber.pcap.out b/test/results/stats/default/viber.pcap.out
index bdebf3d81..d68b27dac 100644
--- a/test/results/stats/default/viber.pcap.out
+++ b/test/results/stats/default/viber.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:222
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:186421
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:186409
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:29
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:23
diff --git a/test/results/stats/default/vk.pcapng.out b/test/results/stats/default/vk.pcapng.out
index f206e5bb4..6548eeef5 100644
--- a/test/results/stats/default/vk.pcapng.out
+++ b/test/results/stats/default/vk.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:84
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:75002
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:74996
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:10
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:10
diff --git a/test/results/stats/default/vnc.pcap.out b/test/results/stats/default/vnc.pcap.out
index 92e0ffcc1..2135d24f4 100644
--- a/test/results/stats/default/vnc.pcap.out
+++ b/test/results/stats/default/vnc.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18484
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18478
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/vrrp3.pcapng.out b/test/results/stats/default/vrrp3.pcapng.out
index 7de8832a3..b3abbbece 100644
--- a/test/results/stats/default/vrrp3.pcapng.out
+++ b/test/results/stats/default/vrrp3.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:15
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10441
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:10435
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/vxlan.pcap.out b/test/results/stats/default/vxlan.pcap.out
index f401a5176..a43b50b2f 100644
--- a/test/results/stats/default/vxlan.pcap.out
+++ b/test/results/stats/default/vxlan.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:63
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:59704
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:59698
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:9
diff --git a/test/results/stats/default/wa_video.pcap.out b/test/results/stats/default/wa_video.pcap.out
index 7a9a0d69f..5c57c920c 100644
--- a/test/results/stats/default/wa_video.pcap.out
+++ b/test/results/stats/default/wa_video.pcap.out
@@ -1,5 +1,5 @@
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:108
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:94242
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:111
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:98039
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:14
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:14
@@ -7,7 +7,7 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:13
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:10
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:13
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:264122
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:47653
@@ -94,8 +94,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:5
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:7
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
@@ -117,7 +117,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
@@ -158,7 +158,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:5
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0
diff --git a/test/results/stats/default/wa_voice.pcap.out b/test/results/stats/default/wa_voice.pcap.out
index 633b096db..c7104529e 100644
--- a/test/results/stats/default/wa_voice.pcap.out
+++ b/test/results/stats/default/wa_voice.pcap.out
@@ -1,5 +1,5 @@
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:217
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:188017
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:220
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:191684
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:28
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:26
@@ -7,7 +7,7 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:27
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:18
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:21
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:34223
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:94669
@@ -94,8 +94,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:5
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:7
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
@@ -117,7 +117,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:2
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
@@ -158,7 +158,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:5
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0
diff --git a/test/results/stats/default/waze.pcap.out b/test/results/stats/default/waze.pcap.out
index 875d3abd4..9a070ba2b 100644
--- a/test/results/stats/default/waze.pcap.out
+++ b/test/results/stats/default/waze.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:282
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:228975
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:229026
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:33
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:30
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
@@ -95,9 +95,9 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:38
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
@@ -116,7 +116,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:34
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:1
diff --git a/test/results/stats/default/webdav.pcap.out b/test/results/stats/default/webdav.pcap.out
index 0d763d3dc..c67fee6ba 100644
--- a/test/results/stats/default/webdav.pcap.out
+++ b/test/results/stats/default/webdav.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7921
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7915
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/webex.pcap.out b/test/results/stats/default/webex.pcap.out
index 50f1320ea..ac3a8eb9a 100644
--- a/test/results/stats/default/webex.pcap.out
+++ b/test/results/stats/default/webex.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:500
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:422984
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:422978
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:57
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:45
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:12
diff --git a/test/results/stats/default/websocket.pcap.out b/test/results/stats/default/websocket.pcap.out
index 7fd7fa70d..23e65df03 100644
--- a/test/results/stats/default/websocket.pcap.out
+++ b/test/results/stats/default/websocket.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7496
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7490
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/wechat.pcap.out b/test/results/stats/default/wechat.pcap.out
index 3fbbd0305..cfc4d37cd 100644
--- a/test/results/stats/default/wechat.pcap.out
+++ b/test/results/stats/default/wechat.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:888
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:774934
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:775044
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:109
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:52
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:57
diff --git a/test/results/stats/default/weibo.pcap.out b/test/results/stats/default/weibo.pcap.out
index 090423375..d2590b48f 100644
--- a/test/results/stats/default/weibo.pcap.out
+++ b/test/results/stats/default/weibo.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:267
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:221068
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:221298
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:44
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:43
diff --git a/test/results/stats/default/whatsapp.pcap.out b/test/results/stats/default/whatsapp.pcap.out
index 736137fef..b33eef3d1 100644
--- a/test/results/stats/default/whatsapp.pcap.out
+++ b/test/results/stats/default/whatsapp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:751
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:562535
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:562409
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:86
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:86
diff --git a/test/results/stats/default/whatsapp_login_call.pcap.out b/test/results/stats/default/whatsapp_login_call.pcap.out
index 0222013c4..739ed8487 100644
--- a/test/results/stats/default/whatsapp_login_call.pcap.out
+++ b/test/results/stats/default/whatsapp_login_call.pcap.out
@@ -1,5 +1,5 @@
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:493
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:412024
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:496
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:416115
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:57
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:24
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:33
@@ -7,7 +7,7 @@ PUTVAL "localhost/exec-nDPIsrvd/counter-flow_update_count" interval=60 N:45
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_analyse_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_guessed_count" interval=60 N:20
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detected_count" interval=60 N:37
-PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:42
+PUTVAL "localhost/exec-nDPIsrvd/counter-flow_detection_update_count" interval=60 N:45
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_not_detected_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_src_total_bytes" interval=60 N:81240
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_dst_total_bytes" interval=60 N:51420
@@ -94,8 +94,8 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_by_ip" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:23
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:25
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
@@ -117,7 +117,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:4
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_8_count" interval=60 N:0
@@ -158,7 +158,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_42_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_43_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_44_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_45_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:17
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_46_count" interval=60 N:19
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_47_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_48_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_49_count" interval=60 N:0
diff --git a/test/results/stats/default/whatsapp_login_chat.pcap.out b/test/results/stats/default/whatsapp_login_chat.pcap.out
index d3d88cc56..2771340ef 100644
--- a/test/results/stats/default/whatsapp_login_chat.pcap.out
+++ b/test/results/stats/default/whatsapp_login_chat.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:61
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:57110
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:57104
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/whatsapp_voice_and_message.pcap.out b/test/results/stats/default/whatsapp_voice_and_message.pcap.out
index 08267d0e3..12814905e 100644
--- a/test/results/stats/default/whatsapp_voice_and_message.pcap.out
+++ b/test/results/stats/default/whatsapp_voice_and_message.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:126
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:102778
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:102772
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:13
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:9
diff --git a/test/results/stats/default/whatsappfiles.pcap.out b/test/results/stats/default/whatsappfiles.pcap.out
index 19017561b..f2f395bce 100644
--- a/test/results/stats/default/whatsappfiles.pcap.out
+++ b/test/results/stats/default/whatsappfiles.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:24
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:23408
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:23402
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/whois.pcapng.out b/test/results/stats/default/whois.pcapng.out
index 83b421e37..7ac108e1d 100644
--- a/test/results/stats/default/whois.pcapng.out
+++ b/test/results/stats/default/whois.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:30
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26518
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:26508
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/windowsupdate_over_http.pcap.out b/test/results/stats/default/windowsupdate_over_http.pcap.out
index 1f3cb9465..805c512d1 100644
--- a/test/results/stats/default/windowsupdate_over_http.pcap.out
+++ b/test/results/stats/default/windowsupdate_over_http.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9634
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:9668
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
@@ -95,9 +95,9 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_dpi_aggressive" interval=6
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_custom_rule" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_confidence_unknown" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_low" interval=60 N:2
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_medium" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_high" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_severe" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_critical" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_emergency" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_severity_unknown" interval=60 N:0
@@ -116,7 +116,7 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_not_detected_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_1_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_2_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_3_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:1
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_4_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_5_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_6_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_7_count" interval=60 N:0
@@ -166,4 +166,4 @@ PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_50_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_51_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_52_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_53_count" interval=60 N:0
-PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:0
+PUTVAL "localhost/exec-nDPIsrvd/gauge-flow_risk_54_count" interval=60 N:1
diff --git a/test/results/stats/default/wireguard.pcap.out b/test/results/stats/default/wireguard.pcap.out
index edaeb5d58..76ac59e92 100644
--- a/test/results/stats/default/wireguard.pcap.out
+++ b/test/results/stats/default/wireguard.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:21
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16913
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:16905
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/wow.pcap.out b/test/results/stats/default/wow.pcap.out
index 3f3ac3811..5d0b2831b 100644
--- a/test/results/stats/default/wow.pcap.out
+++ b/test/results/stats/default/wow.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:45
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32042
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:32034
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:5
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/xdmcp.pcap.out b/test/results/stats/default/xdmcp.pcap.out
index 79e4ae82f..70c637670 100644
--- a/test/results/stats/default/xdmcp.pcap.out
+++ b/test/results/stats/default/xdmcp.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:11
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7532
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:7526
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/xiaomi.pcap.out b/test/results/stats/default/xiaomi.pcap.out
index 34bb38447..ddb7113c6 100644
--- a/test/results/stats/default/xiaomi.pcap.out
+++ b/test/results/stats/default/xiaomi.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:58
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:47194
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:47180
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:7
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:7
diff --git a/test/results/stats/default/xss.pcap.out b/test/results/stats/default/xss.pcap.out
index 0ea1be0e4..f31505c8f 100644
--- a/test/results/stats/default/xss.pcap.out
+++ b/test/results/stats/default/xss.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:17
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12975
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:12969
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:2
diff --git a/test/results/stats/default/yandex.pcapng.out b/test/results/stats/default/yandex.pcapng.out
index 0cc9243a8..3181248cc 100644
--- a/test/results/stats/default/yandex.pcapng.out
+++ b/test/results/stats/default/yandex.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:84
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:73661
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:73651
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:9
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:9
diff --git a/test/results/stats/default/yojimbo.pcap.out b/test/results/stats/default/yojimbo.pcap.out
index 8b5ed9183..45782284d 100644
--- a/test/results/stats/default/yojimbo.pcap.out
+++ b/test/results/stats/default/yojimbo.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:7
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6515
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:6509
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:1
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:1
diff --git a/test/results/stats/default/youtube_quic.pcap.out b/test/results/stats/default/youtube_quic.pcap.out
index f82250a06..adc87629a 100644
--- a/test/results/stats/default/youtube_quic.pcap.out
+++ b/test/results/stats/default/youtube_quic.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:28
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:38667
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:38661
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/youtubeupload.pcap.out b/test/results/stats/default/youtubeupload.pcap.out
index 9661e2d62..72c62f7c4 100644
--- a/test/results/stats/default/youtubeupload.pcap.out
+++ b/test/results/stats/default/youtubeupload.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:30
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:40637
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:40631
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:3
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:3
diff --git a/test/results/stats/default/z3950.pcapng.out b/test/results/stats/default/z3950.pcapng.out
index e96477f09..820dcb521 100644
--- a/test/results/stats/default/z3950.pcapng.out
+++ b/test/results/stats/default/z3950.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13685
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:13677
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/zabbix.pcap.out b/test/results/stats/default/zabbix.pcap.out
index 827d39256..676f56dfc 100644
--- a/test/results/stats/default/zabbix.pcap.out
+++ b/test/results/stats/default/zabbix.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:196
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:141616
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:141608
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:24
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:24
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/zattoo.pcap.out b/test/results/stats/default/zattoo.pcap.out
index f05fd8c42..87c78f7ea 100644
--- a/test/results/stats/default/zattoo.pcap.out
+++ b/test/results/stats/default/zattoo.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:20
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18076
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:18070
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:2
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:0
diff --git a/test/results/stats/default/zoom.pcap.out b/test/results/stats/default/zoom.pcap.out
index c71c687b9..bc8b2766e 100644
--- a/test/results/stats/default/zoom.pcap.out
+++ b/test/results/stats/default/zoom.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:317
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:243590
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:243700
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:33
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:6
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:27
diff --git a/test/results/stats/default/zoom2.pcap.out b/test/results/stats/default/zoom2.pcap.out
index dd2f9576a..1896631a3 100644
--- a/test/results/stats/default/zoom2.pcap.out
+++ b/test/results/stats/default/zoom2.pcap.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:46
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:42077
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:42071
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:4
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:4
diff --git a/test/results/stats/default/zoom_p2p.pcapng.out b/test/results/stats/default/zoom_p2p.pcapng.out
index 8ddb51181..384e621e6 100644
--- a/test/results/stats/default/zoom_p2p.pcapng.out
+++ b/test/results/stats/default/zoom_p2p.pcapng.out
@@ -1,5 +1,5 @@
PUTVAL "localhost/exec-nDPIsrvd/counter-json_lines" interval=60 N:131
-PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:107242
+PUTVAL "localhost/exec-nDPIsrvd/counter-json_bytes" interval=60 N:107236
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_new_count" interval=60 N:13
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_end_count" interval=60 N:0
PUTVAL "localhost/exec-nDPIsrvd/counter-flow_idle_count" interval=60 N:13