bump libnDPI to b95bd0358fd43d9fdfdc5266e3c8923b91e1d4db

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

1 files changed, 49 insertions, 0 deletions

diff --git a/test/results/z3950.pcapng.out b/test/results/z3950.pcapng.out
new file mode 100644
index 000000000..9960e9939
--- /dev/null
+++ b/test/results/z3950.pcapng.out
@@ -0,0 +1,49 @@
+00475{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"z3950.pcapng","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"generic-max-idle-time":600000,"icmp-max-idle-time":30000,"udp-max-idle-time":180000,"tcp-max-idle-time":7440000,"tcp-max-post-end-flow-time":120000,"max-packets-per-flow-to-send":15,"max-packets-per-flow-to-process":255}
+00482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"z3950.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_first_seen":1623680697296,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"193.174.240.93","src_port":58921,"dst_port":210,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
+00423{"flow_id":1,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":296098,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"eJS0JASgYDjgxTWgCABFAAA07vtAAH8Gl6\/AqAJkwa7wXeYpANJ85vsBAAAAAIAC+vCgIgAAAgQFtAEDAwgBAQQC"}
+00422{"flow_id":1,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":327356,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"YDjgxTWgeJS0JASgCABFAAA0AABAADYGz6vBrvBdwKgCZADS5indlQhqfOb7AoAS+vC6GgAAAgQFrAEBBAIBAwMH"}
+00406{"flow_id":1,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":329724,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJS0JASgYDjgxTWgCABFAAAo7vxAAH8Gl7rAqAJkwa7wXeYpANJ85vsC3ZUIa1AQAgTz0QAA"}
+00530{"flow_id":1,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":330632,"pkt_caplen":144,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":144,"pkt_l4_len":110,"pkt":"eJS0JASgYDjgxTWgCABFAACC7v1AAH8Gl1\/AqAJkwa7wXeYpANJ85vsC3ZUIa1AYAgRPTgAAtFiDAgDghAMAwaKFBAQAAACGBAQAAACfbgI4MZ9vClpPT00tQy9ZQVqfcC41LjQuMSAxMmI5NmNlNzE1NjBhNTY2ZGZmZjU5MDFlMmIxYWFhOWQyZGM5NGNj"}
+00414{"flow_id":1,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":354970,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"YDjgxTWgeJS0JASgCABFAAAoHB9AADYGs5jBrvBdwKgCZADS5indlQhrfOb7XFAQAfbzhQAAAAAAAAAA"}
+00533{"flow_id":1,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":355199,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":145,"pkt_l4_len":111,"pkt":"YDjgxTWgeJS0JASgCABFAACDHCBAADYGszzBrvBdwKgCZADS5indlQhrfOb7XFAYAfZffgAAtVmDAgDghAMAwYKFBAQAAACGBAQAAACMAQGfbgI4MZ9vB0dGUy9ZQVqfcC81LjI3LjEgODcyYjZmOTJhMDI0YmI1M2JjMWMxMWRmZWNjZDQ3ZjA2NWY5ODIzOA=="}
+00567{"flow_id":1,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":358768,"pkt_caplen":170,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":170,"pkt_l4_len":136,"pkt":"eJS0JASgYDjgxTWgCABFAACc7v5AAH8Gl0TAqAJkwa7wXeYpANJ85vtc3ZUIxlAYAgM9SwAAtnKNAQCOAQGPAQCQAQGRATGyBp9pA2d2a7VZoVcGByqGSM4TAwGhTKAkv2YhvywKMAifeAEBn3kBB58tETk3OC0xLTQxMjktMTA0OC00oB+\/Zhy\/LAowCJ94AQGfeQEHny0MMTQtMTI5MS0wNDhYvy4CgQA="}
+00426{"flow_id":1,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":401945,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":68,"pkt_l4_len":34,"pkt":"YDjgxTWgeJS0JASgCABFAAA2HCFAADYGs4jBrvBdwKgCZADS5indlQjGfOb70FAYAfYGYgAAtwyXAQGYAQCZAQGWAQE="}
+00442{"flow_id":1,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":422340,"pkt_caplen":81,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":81,"pkt_l4_len":47,"pkt":"eJS0JASgYDjgxTWgCABFAABD7v9AAH8Gl5zAqAJkwa7wXeYpANJ85vvQ3ZUI1FAYAgOHaQAAuBmfHwExngEBnQEBswOAAUafaAcqhkjOEwUK"}
+02350{"flow_id":1,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":475480,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"YDjgxTWgeJS0JASgCABFAAXUHCJAADYGrenBrvBdwKgCZADS5indlQjUfOb761AQAfa61wAAuYCYAQGZAQCbAQC8gDCAgANndmuhgKGAKIAGByqGSM4TBQqBgg6yMDM3NjJuYW0gYTIyMDA4MTcgYyA0NTAwMDAxMDAxMDAwMDAwMDAzMDAwNzAwMDEwMDA1MDAxNzAwMDE3MDA4MDA0MTAwMDM0MDEwMDAxNzAwMDc1MDIwMDAzNjAwMDkyMDIwMDA0MzAwMTI4MDIwMDAzNjAwMTcxMDIwMDA0MzAwMjA3MDI0MDAyMDAwMjUwMDI0MDAxNzAwMjcwMDM1MDAyMTAwMjg3MDM1MDAyNDAwMzA4MDM1MDAyNzAwMzMyMDQwMDAxNTAwMzU5MDQxMDAwODAwMzc0MDQ0MDAyNDAwMzgyMDUwMDAwOTAwNDA2MDgyMDAxMDAwNDE1MDg0MDA4MzAwNDI1MDg0MDAxODAwNTA4MDg0MDAxODAwNTI2MDg0MDAxMzAwNTQ0MDg0MDAxOTAwNTU3MTAwMDA2MDAwNTc2MjQ1MDA4MDAwNjM2MjY0MDA1OTAwNzE2MzAwMDA0NTAwNzc1NTAwMDA0NDAwODIwNjUwMDA2MzAwODY0NjUwMDAzOTAwOTI3NjUwMDAzODAwOTY2NjUwMDAyNTAxMDA0NjUzMDAxMTAxMDI5Njg5MDA2MTAxMDQwNjg5MDAxMTAxMTAxODU2MDA5MTAxMTEyODU2MDA5MjAxMjAzODU2MDA4NDAxMjk1ODU2MDA4ODAxMzc5OTAwMDEwNjAxNDY3OTAwMDA2OTAxNTczOTAwMDA2MjAxNjQyOTAwMDA1OTAxNzA0OTAwMDA5MjAxNzYzOTAwMDA1NzAxODU1OTUxMDAxNDAxOTEyOTUxMDAxODAxOTI2OTUxMDAxMTAxOTQ0OTUxMDAyMDAxOTU1OTUxMDA4NTAxOTc1OTUxMDA2MjAyMDYwOTUxMDAxNzAyMTIyOTUxMDAxNzAyMTM5OTUxMDAwNzAyMTU2OTU0MDA3NTAyMTYzOTU0MDA3MjAyMjM4OTU0MDA3MDAyMzEwOTU0MDA5NzAyMzgwOTU0MDA4MjAyNDc3OTU0MDA3ODAyNTU5OTU0MDA3NzAyNjM3OTU0MDA3NTAyNzE0OTU0MDA4NDAyNzg5OTg2MDAyODAyODczOTg2MDA0MzAyOTAxHjU1MTE2NjA2MR5ERS02MDEeMjAxODAyMTIyMTQ0MzUuMB4wNzEyMDZzMjAwNyAgICB4eHUgICAgICAgICAgIDAwMCAwIGVuZyBkHiAgH2EgIDIwMDc5MjUzNzUeICAfYTE0MTI5MTA0OTggKHBiaykfOTEtNDEyOS0xMDQ5LTgeICAfYTk3ODE0MTI5MTA0OTEgKHBiaykfOTk3OC0xLTQxMjktMTA0OS0xHiAgH2ExNDEyOTEwNDhYIChoYmspHzkxLTQxMjktMTA0OC1YHiAgH2E5NzgxNDEyOTEwNDg0IChoYmspHzk5NzgtMS00MTI5LTEwNDgtNB44IB9hSEJaVEhUMDE1MjEzNTg3HjggH2EgIDIwMDc5MjUzNzUeICAfYShPQ29MQykyNTQ0NTA4MTMeICAfYShERS02MDUpSFQwMTUyMTM1ODceICAfYShERS01OTkpSEJaSFQwMTUyMTM1ODceICAfYmdlch9jR0JWQ1AeMCAfYWVuZx4gIB9jWEQtVVMfY1hBLUdCH2NYQi1JTh4gMB9hR0U0MB4wMB9hMzYzLjceICAfYTQzLjAyHzlQaGlsb3NvcGhpZSB1bmQgVGhlb3JpZSBkZXIgVW13ZWx0Zm9yc2NodW5nIHVuZCBkZXMgVW13ZWx0c2NodXR6ZXMfMmJrbB4gIB9hUkIgMTA4NDQfMnJ2ax4gIB9hUkIgMTAwMzgfMnJ2ax4gIB9hMTQfMnNzZ24eICAfYWdnbx9xREUtNjAxHzJ6HjEgH2FIaW5jaGxpZmZlLCBTdGV2"}
+02350{"flow_id":1,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":475717,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"pkt":"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"}
+01623{"flow_id":1,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":475924,"pkt_caplen":963,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":963,"pkt_l4_len":929,"pkt":"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"}
+00408{"flow_id":1,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680697,"pkt_ts_usec":480287,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJS0JASgYDjgxTWgCABFAAAo7wBAAH8Gl7bAqAJkwa7wXeYpANJ85vvr3ZUXuVAQAgTjmgAA"}
+00408{"flow_id":1,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680698,"pkt_ts_usec":821983,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"eJS0JASgYDjgxTWgCABFAAAo7wFAAH8Gl7XAqAJkwa7wXeYpANJ85vvr3ZUXuVARAgTjmQAA"}
+00416{"flow_id":1,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1623680698,"pkt_ts_usec":846157,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"YDjgxTWgeJS0JASgCABFAAAoHCVAADYGs5LBrvBdwKgCZADS5indlRe5fOb77FARAfbjpgAAAAAAAAAA"}
+00537{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":16,"source":"z3950.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":15,"flow_first_seen":1623680697296,"flow_last_seen":1623680698846,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1452,"flow_tot_l4_payload_len":4151,"flow_avg_l4_payload_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"193.174.240.93","src_port":58921,"dst_port":210,"l4_proto":"tcp","ndpi": {"proto":"Z39.50","breed":"Acceptable","category":"Network"}}
+00504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":16,"source":"z3950.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":15,"flow_first_seen":1623680697296,"flow_last_seen":1623680698846,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":1452,"flow_tot_l4_payload_len":4151,"flow_avg_l4_payload_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"193.174.240.93","src_port":58921,"dst_port":210,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
+00483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"z3950.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_first_seen":1625070123680,"flow_last_seen":0,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":0,"flow_tot_l4_payload_len":0,"flow_avg_l4_payload_len":0,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.20","dst_ip":"129.187.139.43","src_port":46524,"dst_port":9991,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
+00424{"flow_id":2,"flow_packet_id":1,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070123,"pkt_ts_usec":680497,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"YDjgxTWgABjzZLGICABFAAA0k\/xAAJAGiSTAqAAUgbuLK7W8JweM39PGAAAAAIAC+vDNyQAAAgQFtAEBBAIBAwMH"}
+00424{"flow_id":2,"flow_packet_id":2,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070123,"pkt_ts_usec":709562,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"pkt":"ABjzZLGIYDjgxTWgCABFAAA0AABAADUGeCGBu4srwKgAFCcHtbz4JgxZjN\/Tx4ASchDtagAAAgQFrAEBBAIBAwMH"}
+00409{"flow_id":2,"flow_packet_id":3,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070123,"pkt_ts_usec":709610,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"YDjgxTWgABjzZLGICABFAAAok\/1AAJAGiS\/AqAAUgbuLK7W8JweM39PH+CYMWlAQAfbNvQAA"}
+00523{"flow_id":2,"flow_packet_id":4,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070123,"pkt_ts_usec":709710,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"pkt":"YDjgxTWgABjzZLGICABFAAB8k\/5AAJAGiNrAqAAUgbuLK7W8JweM39PH+CYMWlAYAfbOEQAAtFKDAgDghAMA6aKFBAQAAACGBAQAAACfbgI4MZ9vA1lBWp9wLzUuMjcuMSA4NzJiNmY5MmEwMjRiYjUzYmMxYzExZGZlY2NkNDdmMDY1Zjk4MjM4"}
+00416{"flow_id":2,"flow_packet_id":5,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070123,"pkt_ts_usec":738257,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABjzZLGIYDjgxTWgCABFAAAo5s1AADUGkV+Bu4srwKgAFCcHtbz4JgxajN\/UG1AQAOWfDAAAAAAAAAAA"}
+00563{"flow_id":2,"flow_packet_id":6,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070123,"pkt_ts_usec":740715,"pkt_caplen":167,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":167,"pkt_l4_len":133,"pkt":"ABjzZLGIYDjgxTWgCABFAACZ5s5AADUGkO2Bu4srwKgAFCcHtbz4JgxajN\/UG1AYAOXqMgAAtW+DAgDghAMA6aKFBAQAAACGBAQAAACMAQGfbgI4MZ9vFEFsZXBoIFNlcnZlci9HRlMvWUFan3A4QUxFUEggMjMvNC4yLjY2IDdmZTRiN2RlMmViOTFmYzg3YTVjNTNmZjA4MWIxNWRmMGM0NDlhMGE="}
+00408{"flow_id":2,"flow_packet_id":7,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070123,"pkt_ts_usec":740725,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"YDjgxTWgABjzZLGICABFAAAok\/9AAJAGiS3AqAAUgbuLK7W8JweM39Qb+CYMy1AQAfbNvQAA"}
+00491{"flow_id":2,"flow_packet_id":8,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070132,"pkt_ts_usec":747969,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":112,"pkt_l4_len":78,"pkt":"YDjgxTWgABjzZLGICABFAABilABAAJAGiPLAqAAUgbuLK7W8JweM39Qb+CYMy1AYAfbN9wAAtjiNAQCOAQGPAQCQAQGRATGyCp9pB0RlZmF1bHS1G6EZBgcqhkjOEwMBoA6\/Zgu\/LACfLQVrbnV0aA=="}
+00469{"flow_id":2,"flow_packet_id":9,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070132,"pkt_ts_usec":777866,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABjzZLGIYDjgxTWgCABFAABT5s9AADUGkTKBu4srwKgAFCcHtbz4JgzLjN\/UVVAYAOVuWwAAtymXAQCYAQCZAQCWAQCaAQO\/gQIWBgcqhkjOEwQBAgIA6xoHRGVmYXVsdA=="}
+00408{"flow_id":2,"flow_packet_id":10,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070132,"pkt_ts_usec":777881,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"YDjgxTWgABjzZLGICABFAAAolAFAAJAGiSvAqAAUgbuLK7W8JweM39RV+CYM9lAQAfbNvQAA"}
+00508{"flow_id":2,"flow_packet_id":11,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070196,"pkt_ts_usec":998319,"pkt_caplen":124,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":124,"pkt_l4_len":90,"pkt":"YDjgxTWgABjzZLGICABFAABulAJAAJIGhuTAqAAUgbuLK7W8JweM39RV+CYM9lAYAfbOAwAAtkSNAQCOAQGPAQCQAQGRATSyCp9pB0RlZmF1bHS1J6ElBgcqhkjOEwMBoBq\/Zhe\/LACfLRFwb2xpdGljYWwgZWNvbm9teQ=="}
+00535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"z3950.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":11,"flow_first_seen":1625070123680,"flow_last_seen":1625070196998,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":113,"flow_tot_l4_payload_len":368,"flow_avg_l4_payload_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.20","dst_ip":"129.187.139.43","src_port":46524,"dst_port":9991,"l4_proto":"tcp","ndpi": {"proto":"Z39.50","breed":"Acceptable","category":"Network"}}
+00469{"flow_id":2,"flow_packet_id":12,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070197,"pkt_ts_usec":28251,"pkt_caplen":97,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":97,"pkt_l4_len":63,"pkt":"ABjzZLGIYDjgxTWgCABFAABT5tBAADUGkTGBu4srwKgAFCcHtbz4Jgz2jN\/Um1AYAOVt6gAAtymXAQCYAQCZAQCWAQCaAQO\/gQIWBgcqhkjOEwQBAgIA6xoHRGVmYXVsdA=="}
+00407{"flow_id":2,"flow_packet_id":13,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070197,"pkt_ts_usec":28286,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"YDjgxTWgABjzZLGICABFAAAolANAAJIGhynAqAAUgbuLK7W8JweM39Sb+CYNIVAQAfbNvQAA"}
+00408{"flow_id":2,"flow_packet_id":14,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070200,"pkt_ts_usec":188509,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"pkt":"YDjgxTWgABjzZLGICABFAAAolARAAJIGhyjAqAAUgbuLK7W8JweM39Sb+CYNIVARAfbNvQAA"}
+00417{"flow_id":2,"flow_packet_id":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"z3950.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_ts_sec":1625070200,"pkt_ts_usec":217346,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"pkt":"ABjzZLGIYDjgxTWgCABFAAAo5tFAADUGkVuBu4srwKgAFCcHtbz4Jg0hjN\/UnFARAOWdwwAAAAAAAAAA"}
+00501{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":31,"source":"z3950.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":16,"flow_first_seen":1625070123680,"flow_last_seen":1625070200217,"flow_min_l4_payload_len":0,"flow_max_l4_payload_len":113,"flow_tot_l4_payload_len":411,"flow_avg_l4_payload_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.20","dst_ip":"129.187.139.43","src_port":46524,"dst_port":9991,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":15}
+00127{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":31,"source":"z3950.pcapng","alias":"nDPId-test"}
+~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~
+~~ packets captured/processed: 31/31
+~~ skipped flows.............: 0
+~~ total layer4 data length..: 5230 bytes
+~~ total detected protocols..: 1
+~~ total active/idle flows...: 2/2
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+~~ total memory allocated....: 1755967 bytes
+~~ total memory freed........: 1755967 bytes
+~~ total allocations/frees...: 33357/33357
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~