diff options
| author | Toni Uhlig <matzeton@googlemail.com> | 2024-01-28 18:11:34 +0100 |
|---|---|---|
| committer | Toni Uhlig <matzeton@googlemail.com> | 2024-01-29 18:11:34 +0100 |
| commit | 7368f222dbddebab4cb36d7585cb152721bdd024 (patch) | |
| tree | 4f599081868de951c6021452553a07eba422c20b /test/results | |
| parent | a007a907daebbf78dc3fead8fa2ad23d1156f732 (diff) | |
Fixed broken "not-detected" event/packet capture in captured example.
* aligned it with influxd example
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'test/results')
35 files changed, 2588 insertions, 0 deletions
diff --git a/test/results/flow-captured/caches_cfg/teams.pcap.out b/test/results/flow-captured/caches_cfg/teams.pcap.out index 7cab07517..7a0343add 100644 --- a/test/results/flow-captured/caches_cfg/teams.pcap.out +++ b/test/results/flow-captured/caches_cfg/teams.pcap.out @@ -13,6 +13,8 @@ Flow 51 risky: tcp 192.168.1.6:60561 -> 52.114.77.33:443 Flow 74 risky: tcp 192.168.1.6:60567 -> 52.114.77.136:443 Flow 30 risky: tcp 192.168.1.6:60546 -> 167.99.215.164:4434 Flow 61 risky: tcp 192.168.1.6:60566 -> 167.99.215.164:4434 +Flow 60 not-detected: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 +Flow 60 midstream: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 Flow 10 risky: udp 192.168.1.6:64046 -> 192.168.1.1:53 Flow 81 risky: udp 52.114.252.8:3479 -> 192.168.1.6:50016 diff --git a/test/results/flow-captured/default/1kxun.pcap.out b/test/results/flow-captured/default/1kxun.pcap.out index e951b4706..e818177e6 100644 --- a/test/results/flow-captured/default/1kxun.pcap.out +++ b/test/results/flow-captured/default/1kxun.pcap.out @@ -10,18 +10,32 @@ Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 39 risky: udp 192.168.115.8:54420 -> 8.8.8.8:53 Flow 26 risky: udp 192.168.115.8:60724 -> 8.8.8.8:53 Flow 33 risky: udp fe80::e98f:bae2:19f7:6b0f:54888 -> ff02::1:3:5355 +Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 +Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 +Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 +Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 Flow 38 risky: tcp 192.168.115.8:49607 -> 218.244.135.170:9099 +Flow 42 not-detected: udp 192.168.10.110:60480 -> 255.255.255.255:62976 +Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 Flow 45 risky: tcp 192.168.5.16:53623 -> 192.168.115.75:443 Flow 87 risky: tcp 192.168.5.16:53625 -> 192.168.115.75:443 Flow 107 risky: tcp 192.168.5.16:53626 -> 192.168.115.75:443 Flow 117 risky: tcp 192.168.5.16:53629 -> 192.168.115.75:443 +Flow 65 not-detected: udp 192.168.140.140:62976 -> 255.255.255.255:62976 +Flow 71 not-detected: udp 192.168.10.7:62976 -> 255.255.255.255:62976 +Flow 22 not-detected: udp 192.168.125.30:62976 -> 255.255.255.255:62976 +Flow 88 not-detected: udp 192.168.119.1:56861 -> 255.255.255.255:5678 +Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 Flow 46 risky: tcp 192.168.115.8:49612 -> 183.131.48.145:80 Flow 49 risky: tcp 192.168.115.8:49613 -> 183.131.48.144:80 +Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 +Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 +Flow 86 not-detected: udp 59.120.208.212:32768 -> 255.255.255.255:1947 Flow 142 midstream: tcp 192.168.2.126:46170 -> 172.105.121.82:80 Flow 146 midstream: tcp 192.168.2.126:45380 -> 161.117.13.29:80 Flow 160 midstream: tcp 192.168.2.126:49380 -> 14.136.136.108:80 diff --git a/test/results/flow-captured/default/6in6tunnel.pcap.out b/test/results/flow-captured/default/6in6tunnel.pcap.out index e69de29bb..b1c056b9b 100644 --- a/test/results/flow-captured/default/6in6tunnel.pcap.out +++ b/test/results/flow-captured/default/6in6tunnel.pcap.out @@ -0,0 +1,2 @@ +Flow 1 not-detected: 41 2001:4f8:4:7:2e0:81ff:fe52:ffff -> 2001:4f8:4:7:2e0:81ff:fe52:9a6b +Flow 2 not-detected: 41 feed::beef -> feed::cafe diff --git a/test/results/flow-captured/default/anyconnect-vpn.pcap.out b/test/results/flow-captured/default/anyconnect-vpn.pcap.out index 50dc6f6e7..b016524e5 100644 --- a/test/results/flow-captured/default/anyconnect-vpn.pcap.out +++ b/test/results/flow-captured/default/anyconnect-vpn.pcap.out @@ -15,5 +15,8 @@ Flow 44 risky: tcp 10.0.0.227:56886 -> 17.57.144.116:5223 Flow 44 midstream: tcp 10.0.0.227:56886 -> 17.57.144.116:5223 Flow 15 risky: tcp 10.0.0.227:56919 -> 8.37.102.91:443 Flow 38 risky: tcp 10.0.0.227:56929 -> 8.37.102.91:443 +Flow 40 not-detected: tcp 10.0.0.227:56866 -> 10.0.0.151:8060 +Flow 40 midstream: tcp 10.0.0.227:56866 -> 10.0.0.151:8060 Flow 62 risky: tcp 10.0.0.227:56954 -> 10.0.0.149:8008 Flow 63 risky: tcp 10.0.0.227:56955 -> 10.0.0.151:8060 +Flow 60 not-detected: udp 10.0.0.227:52595 -> 10.0.0.1:192 diff --git a/test/results/flow-captured/default/custom_rules_ipv6.pcapng.out b/test/results/flow-captured/default/custom_rules_ipv6.pcapng.out index e69de29bb..ff74288f0 100644 --- a/test/results/flow-captured/default/custom_rules_ipv6.pcapng.out +++ b/test/results/flow-captured/default/custom_rules_ipv6.pcapng.out @@ -0,0 +1,3 @@ +Flow 1 not-detected: udp 3ffe:507::1:200:86ff:fe05:80da:21554 -> 3ffe:501:4819::42:5333 +Flow 4 not-detected: udp fe80::76ac:b9ff:fe6c:c124:12718 -> ff02::1:26993 +Flow 5 not-detected: udp fe80::76ac:b9ff:fe6c:c124:12717 -> ff02::1:64315 diff --git a/test/results/flow-captured/default/custom_rules_same-ip_multiple_ports.pcapng.out b/test/results/flow-captured/default/custom_rules_same-ip_multiple_ports.pcapng.out index e69de29bb..9dd279f63 100644 --- a/test/results/flow-captured/default/custom_rules_same-ip_multiple_ports.pcapng.out +++ b/test/results/flow-captured/default/custom_rules_same-ip_multiple_ports.pcapng.out @@ -0,0 +1,2 @@ +Flow 3 not-detected: tcp 192.168.1.245:58288 -> 3.3.3.3:446 +Flow 2 not-detected: tcp 192.168.1.245:59682 -> 3.3.3.3:444 diff --git a/test/results/flow-captured/default/ftp.pcap.out b/test/results/flow-captured/default/ftp.pcap.out index 5ad156c68..859c0bfef 100644 --- a/test/results/flow-captured/default/ftp.pcap.out +++ b/test/results/flow-captured/default/ftp.pcap.out @@ -1,2 +1,3 @@ Flow 1 risky: tcp 192.168.1.212:50694 -> 90.130.70.73:21 +Flow 3 not-detected: tcp 192.168.1.212:50696 -> 90.130.70.73:24523 Flow 2 risky: tcp 192.168.1.212:50695 -> 90.130.70.73:25685 diff --git a/test/results/flow-captured/default/fuzz-2006-06-26-2594.pcap.out b/test/results/flow-captured/default/fuzz-2006-06-26-2594.pcap.out index 82126799b..e8cdea6f4 100644 --- a/test/results/flow-captured/default/fuzz-2006-06-26-2594.pcap.out +++ b/test/results/flow-captured/default/fuzz-2006-06-26-2594.pcap.out @@ -1,25 +1,69 @@ Flow 17 risky: udp 192.168.1.2:138 -> 192.168.1.251:138 Flow 22 risky: udp 192.168.1.2:2719 -> 192.168.1.1:53 +Flow 41 not-detected: tcp 192.168.1.2:2721 -> 147.234.1.253:58999 +Flow 41 midstream: tcp 192.168.1.2:2721 -> 147.234.1.253:58999 +Flow 9 not-detected: udp 192.168.1.2:2597 -> 192.168.1.1:29440 +Flow 5 not-detected: udp 192.168.1.2:2712 -> 192.168.1.1:49973 +Flow 15 not-detected: udp 192.168.1.1:9587 -> 192.168.1.2:156 +Flow 47 not-detected: udp 192.168.1.2:2724 -> 192.168.1.1:9587 +Flow 55 not-detected: udp 192.168.1.2:43690 -> 192.170.170.170:43690 Flow 91 risky: udp 192.168.1.2:5060 -> 200.68.120.81:5060 Flow 97 risky: udp 192.168.1.1:53 -> 192.168.1.2:2751 Flow 100 risky: udp 192.168.1.2:4901 -> 200.68.120.81:29440 +Flow 78 not-detected: udp 192.168.1.2:2730 -> 192.168.1.1:43690 Flow 111 risky: udp 192.168.1.2:2757 -> 192.168.1.1:53 +Flow 82 not-detected: udp 192.168.1.170:43690 -> 170.170.170.170:43690 Flow 122 risky: udp 192.168.1.1:53 -> 192.168.1.2:2763 Flow 123 risky: udp 192.168.1.2:2764 -> 192.168.1.1:53 Flow 126 risky: udp 192.168.1.1:53 -> 192.168.1.2:2765 Flow 141 risky: udp 192.168.1.2:138 -> 192.168.1.255:138 +Flow 124 not-detected: udp 192.168.1.2:43690 -> 170.170.170.170:43690 Flow 147 risky: udp 192.168.1.2:2775 -> 192.168.1.1:53 +Flow 58 not-detected: 120 192.168.1.2 -> 212.242.33.35 +Flow 133 not-detected: udp 94.168.1.2:2768 -> 192.168.1.1:4 +Flow 135 not-detected: udp 192.168.1.1:117 -> 192.168.1.2:2769 Flow 177 risky: udp 192.168.1.1:53 -> 240.168.1.2:2792 +Flow 162 not-detected: udp 212.242.33.35:9587 -> 192.168.1.2:196 +Flow 85 not-detected: 240 192.168.1.2 -> 192.168.1.1 +Flow 173 not-detected: udp 170.170.170.170:43690 -> 170.170.170.170:43690 +Flow 107 not-detected: 118 192.168.1.2 -> 200.68.120.81 Flow 180 risky: udp 192.168.1.41:138 -> 192.168.1.255:138 Flow 190 risky: udp 192.168.1.2:2793 -> 192.168.1.1:53 Flow 193 risky: udp 192.168.1.2:2794 -> 192.168.1.1:53 Flow 192 risky: udp 192.168.1.2:2795 -> 192.168.1.1:53 Flow 197 risky: udp 192.168.1.2:2797 -> 192.168.1.1:53 +Flow 186 not-detected: udp 192.168.1.2:43690 -> 192.168.170.170:43690 Flow 204 risky: udp 192.168.1.2:2801 -> 192.168.1.1:53 +Flow 136 not-detected: 127 192.168.1.2 -> 192.168.1.1 Flow 214 risky: udp 192.168.1.1:53 -> 192.168.1.2:2807 +Flow 195 not-detected: udp 192.168.170.170:43690 -> 170.170.170.170:43690 +Flow 149 not-detected: 0 192.168.1.2 -> 192.168.1.255 +Flow 203 not-detected: udp 192.168.1.2:2800 -> 192.168.1.1:21 Flow 230 risky: udp 192.168.1.2:2815 -> 192.168.1.1:53 +Flow 157 not-detected: 19 192.168.1.2 -> 192.168.1.1 +Flow 117 not-detected: 37 192.168.1.1 -> 192.168.1.2 +Flow 211 not-detected: udp 192.168.1.2:2805 -> 192.168.1.1:51 +Flow 215 not-detected: udp 192.168.1.2:2808 -> 192.168.1.1:38709 +Flow 166 not-detected: 0 192.168.1.1 -> 192.168.1.2 Flow 243 risky: udp 192.168.1.2:138 -> 192.168.1.255:138 Flow 244 risky: udp 192.168.1.2:2826 -> 192.168.1.1:53 +Flow 33 not-detected: tcp 147.234.1.253:1045 -> 192.168.1.2:2720 +Flow 33 midstream: tcp 147.234.1.253:1045 -> 192.168.1.2:2720 +Flow 29 not-detected: tcp 147.234.1.170:43690 -> 170.170.170.170:43690 +Flow 205 not-detected: 0 192.168.1.2 -> 212.242.33.35 Flow 249 risky: udp 192.168.1.1:53 -> 192.168.1.2:2572 +Flow 42 not-detected: tcp 147.234.1.253:58999 -> 192.232.1.2:2721 +Flow 42 midstream: tcp 147.234.1.253:58999 -> 192.232.1.2:2721 +Flow 39 not-detected: tcp 192.168.1.6:2721 -> 147.234.1.253:58999 Flow 254 risky: udp 192.168.1.2:2830 -> 192.168.1.1:53 +Flow 40 not-detected: tcp 37.115.0.253:58999 -> 192.168.1.2:2721 +Flow 37 not-detected: 170 170.170.170.170 -> 170.170.170.170 +Flow 30 not-detected: tcp 147.234.1.249:2069 -> 192.168.1.2:2720 +Flow 30 midstream: tcp 147.234.1.249:2069 -> 192.168.1.2:2720 Flow 32 midstream: tcp 147.234.1.253:21 -> 192.168.1.2:2732 +Flow 237 not-detected: udp 81.168.1.2:30000 -> 212.242.33.36:40392 +Flow 28 not-detected: tcp 147.234.1.253:120 -> 192.168.1.2:2720 +Flow 28 midstream: tcp 147.234.1.253:120 -> 192.168.1.2:2720 +Flow 233 not-detected: udp 192.168.1.3:30000 -> 212.242.33.36:40392 +Flow 236 not-detected: udp 192.168.1.2:30000 -> 214.242.33.36:40392 +Flow 234 not-detected: udp 192.168.1.2:30000 -> 37.115.0.36:40392 diff --git a/test/results/flow-captured/default/fuzz-2006-09-29-28586.pcap.out b/test/results/flow-captured/default/fuzz-2006-09-29-28586.pcap.out index e5cc2fa8c..7ba8a7993 100644 --- a/test/results/flow-captured/default/fuzz-2006-09-29-28586.pcap.out +++ b/test/results/flow-captured/default/fuzz-2006-09-29-28586.pcap.out @@ -1,6 +1,11 @@ Flow 34 risky: tcp 172.20.3.13:53136 -> 172.20.3.5:80 Flow 34 midstream: tcp 172.20.3.13:53136 -> 172.20.3.5:80 +Flow 39 not-detected: 115 172.20.3.13 -> 172.20.3.5 +Flow 24 not-detected: tcp 170.170.170.170:43690 -> 170.170.170.170:43690 Flow 11 risky: tcp 172.20.3.5:2602 -> 172.20.3.13:80 Flow 11 midstream: tcp 172.20.3.5:2602 -> 172.20.3.13:80 +Flow 3 not-detected: tcp 172.20.3.13:81 -> 172.20.3.5:2601 +Flow 3 midstream: tcp 172.20.3.13:81 -> 172.20.3.5:2601 Flow 18 risky: tcp 172.20.3.5:2604 -> 172.20.3.13:80 Flow 27 risky: tcp 172.20.3.5:2606 -> 172.20.3.13:80 +Flow 10 not-detected: 170 170.170.170.170 -> 170.170.170.170 diff --git a/test/results/flow-captured/default/fuzz-2020-02-16-11740.pcap.out b/test/results/flow-captured/default/fuzz-2020-02-16-11740.pcap.out index e69de29bb..589d52369 100644 --- a/test/results/flow-captured/default/fuzz-2020-02-16-11740.pcap.out +++ b/test/results/flow-captured/default/fuzz-2020-02-16-11740.pcap.out @@ -0,0 +1,19 @@ +Flow 4 not-detected: udp 10.12.64.30:29200 -> 198.226.25.53:1796 +Flow 6 not-detected: udp 198.226.25.53:30764 -> 10.12.64.30:12344 +Flow 10 not-detected: udp 198.226.25.53:309 -> 10.12.64.30:12339 +Flow 7 not-detected: udp 198.226.170.170:43690 -> 170.170.170.170:43690 +Flow 13 not-detected: udp 198.162.25.53:1810 -> 10.12.64.30:29200 +Flow 11 not-detected: udp 170.170.170.170:43690 -> 170.170.170.170:43690 +Flow 25 not-detected: udp 198.226.25.53:1895 -> 10.12.64.30:29200 +Flow 17 not-detected: 88 198.226.25.53 -> 10.12.64.30 +Flow 18 not-detected: 254 10.12.64.30 -> 198.226.25.53 +Flow 23 not-detected: 85 198.226.25.62 -> 10.12.64.30 +Flow 43 not-detected: udp 198.226.25.53:1965 -> 10.12.64.30:29200 +Flow 47 not-detected: udp 198.226.25.53:43690 -> 10.12.170.170:43690 +Flow 44 not-detected: 0 10.12.64.30 -> 198.226.25.53 +Flow 64 not-detected: udp 198.226.25.53:3860 -> 14.12.64.30:29200 +Flow 68 not-detected: udp 198.226.25.53:43028 -> 10.12.64.30:29200 +Flow 40 not-detected: 170 170.170.170.170 -> 170.170.170.170 +Flow 74 not-detected: udp 198.226.25.53:1814 -> 10.12.64.30:29200 +Flow 75 not-detected: udp 57.12.64.30:29200 -> 198.226.25.53:28948 +Flow 79 not-detected: 37 198.226.25.53 -> 10.12.64.30 diff --git a/test/results/flow-captured/default/gnutella.pcap.out b/test/results/flow-captured/default/gnutella.pcap.out index a14f24445..f369671cf 100644 --- a/test/results/flow-captured/default/gnutella.pcap.out +++ b/test/results/flow-captured/default/gnutella.pcap.out @@ -187,9 +187,13 @@ Flow 77 risky: tcp 10.0.2.15:50236 -> 93.29.135.209:6346 Flow 73 risky: tcp 10.0.2.15:50232 -> 182.155.242.225:15068 Flow 67 risky: tcp 10.0.2.15:50226 -> 116.241.162.162:15677 Flow 119 risky: tcp 10.0.2.15:50250 -> 27.94.154.53:6346 +Flow 42 not-detected: tcp 10.0.2.15:50202 -> 61.238.173.128:57648 Flow 36 risky: tcp 10.0.2.15:50197 -> 118.168.15.71:3931 Flow 121 risky: tcp 10.0.2.15:50252 -> 123.202.31.113:19768 +Flow 63 not-detected: tcp 10.0.2.15:50222 -> 119.14.143.237:6523 +Flow 61 not-detected: tcp 10.0.2.15:50220 -> 36.233.196.226:3820 Flow 43 risky: tcp 10.0.2.15:50203 -> 61.222.160.99:18994 +Flow 69 not-detected: tcp 10.0.2.15:50228 -> 111.241.31.96:14384 Flow 122 risky: tcp 10.0.2.15:50253 -> 103.232.107.100:43508 Flow 38 risky: tcp 10.0.2.15:50199 -> 47.147.52.21:36728 Flow 51 risky: tcp 10.0.2.15:50211 -> 14.199.10.60:23458 @@ -204,14 +208,17 @@ Flow 289 risky: tcp 10.0.2.15:50313 -> 96.65.68.194:35481 Flow 223 risky: tcp 10.0.2.15:50269 -> 218.103.139.2:3186 Flow 148 risky: tcp 10.0.2.15:50261 -> 156.57.42.2:33476 Flow 280 risky: tcp 10.0.2.15:50304 -> 85.168.34.105:39908 +Flow 143 not-detected: tcp 10.0.2.15:50256 -> 36.233.201.161:2886 Flow 285 risky: tcp 10.0.2.15:50309 -> 60.241.48.194:21301 Flow 283 risky: tcp 10.0.2.15:50307 -> 176.99.176.20:6346 Flow 149 risky: tcp 10.0.2.15:50262 -> 80.61.221.246:30577 Flow 295 risky: tcp 10.0.2.15:50319 -> 185.187.74.173:53489 Flow 298 risky: tcp 10.0.2.15:50322 -> 164.132.10.25:55302 +Flow 237 not-detected: tcp 10.0.2.15:50283 -> 51.68.153.214:35004 Flow 269 risky: tcp 10.0.2.15:50293 -> 97.83.183.148:8890 Flow 296 risky: tcp 10.0.2.15:50320 -> 194.163.180.126:10825 Flow 284 risky: tcp 10.0.2.15:50308 -> 193.37.255.130:61616 +Flow 153 not-detected: tcp 10.0.2.15:50266 -> 219.70.175.103:4315 Flow 37 risky: tcp 10.0.2.15:50198 -> 86.129.196.84:9915 Flow 287 risky: tcp 10.0.2.15:50311 -> 149.28.163.175:49956 Flow 291 risky: tcp 10.0.2.15:50315 -> 45.31.152.112:26851 @@ -241,6 +248,11 @@ Flow 364 risky: udp 10.0.2.15:28681 -> 194.163.180.126:10825 Flow 367 risky: udp 10.0.2.15:28681 -> 149.28.163.175:49956 Flow 267 risky: tcp 10.0.2.15:50291 -> 200.7.155.210:28365 Flow 345 risky: tcp 10.0.2.15:50330 -> 69.118.162.229:46906 +Flow 220 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:9239 +Flow 31 not-detected: tcp 10.0.2.15:50193 -> 89.75.52.19:46010 +Flow 28 not-detected: tcp 10.0.2.15:50190 -> 80.140.63.147:29545 +Flow 30 not-detected: tcp 10.0.2.15:50192 -> 45.65.87.24:16201 +Flow 29 not-detected: tcp 10.0.2.15:50191 -> 207.38.163.228:6778 Flow 371 risky: udp 10.0.2.15:28681 -> 109.131.202.24:44748 Flow 370 risky: udp 10.0.2.15:28681 -> 91.172.56.198:11984 Flow 374 risky: udp 10.0.2.15:28681 -> 62.35.190.5:18604 @@ -302,6 +314,8 @@ Flow 489 risky: udp 10.0.2.15:28681 -> 108.44.45.25:6346 Flow 487 risky: udp 10.0.2.15:28681 -> 24.78.134.188:49046 Flow 491 risky: udp 10.0.2.15:28681 -> 36.233.42.210:5512 Flow 492 risky: udp 10.0.2.15:28681 -> 172.94.41.71:6346 +Flow 90 not-detected: tcp 10.0.2.15:50245 -> 73.62.225.181:46843 +Flow 300 not-detected: udp 10.0.2.15:28681 -> 104.238.172.250:23548 Flow 509 risky: udp 10.0.2.15:28681 -> 92.142.109.190:41370 Flow 511 risky: udp 10.0.2.15:28681 -> 68.47.223.27:6346 Flow 496 risky: udp 10.0.2.15:28681 -> 218.173.230.98:19004 @@ -328,21 +342,318 @@ Flow 519 risky: udp 10.0.2.15:28681 -> 219.70.48.23:8070 Flow 510 risky: udp 10.0.2.15:28681 -> 79.94.85.113:6346 Flow 497 risky: udp 10.0.2.15:28681 -> 84.100.76.123:39628 Flow 515 risky: udp 10.0.2.15:28681 -> 220.137.106.173:11625 +Flow 301 not-detected: udp 10.0.2.15:28681 -> 188.61.52.183:11852 +Flow 243 not-detected: udp 10.0.2.15:28681 -> 104.156.226.72:53258 +Flow 242 not-detected: udp 10.0.2.15:28681 -> 75.133.101.93:52367 Flow 750 risky: udp 10.0.2.15:28681 -> 67.193.8.52:38584 Flow 752 risky: udp 10.0.2.15:28681 -> 78.231.73.14:6346 Flow 748 risky: udp 10.0.2.15:28681 -> 92.8.59.80:35192 Flow 751 risky: udp 10.0.2.15:28681 -> 142.115.218.152:5900 Flow 749 risky: udp 10.0.2.15:28681 -> 78.159.27.22:17563 Flow 753 risky: udp 10.0.2.15:28681 -> 165.84.140.96:14400 +Flow 369 not-detected: udp 10.0.2.15:28681 -> 89.187.171.240:6346 Flow 755 risky: udp 10.0.2.15:28681 -> 83.134.107.32:38836 Flow 756 risky: udp 10.0.2.15:28681 -> 41.100.68.255:12838 +Flow 398 not-detected: udp 10.0.2.15:28681 -> 62.102.148.166:31332 +Flow 392 not-detected: udp 10.0.2.15:28681 -> 42.0.69.215:12608 +Flow 304 not-detected: udp 10.0.2.15:28681 -> 193.32.126.214:59596 +Flow 389 not-detected: udp 10.0.2.15:28681 -> 94.215.183.71:31310 +Flow 385 not-detected: udp 10.0.2.15:28681 -> 66.223.143.31:47978 +Flow 399 not-detected: udp 10.0.2.15:28681 -> 175.39.219.223:31728 +Flow 303 not-detected: udp 10.0.2.15:28681 -> 142.132.165.13:30566 +Flow 395 not-detected: udp 10.0.2.15:28681 -> 191.114.88.39:18751 +Flow 387 not-detected: udp 10.0.2.15:28681 -> 220.135.8.7:1219 +Flow 390 not-detected: udp 10.0.2.15:28681 -> 144.134.132.206:16401 +Flow 391 not-detected: udp 10.0.2.15:28681 -> 161.81.38.67:9539 +Flow 397 not-detected: udp 10.0.2.15:28681 -> 80.7.252.192:24634 +Flow 396 not-detected: udp 10.0.2.15:28681 -> 112.119.59.24:28755 +Flow 483 not-detected: udp 10.0.2.2:1026 -> 10.0.2.15:28681 Flow 759 risky: udp 10.0.2.15:28681 -> 104.238.172.250:23548 Flow 757 risky: udp 10.0.2.15:28681 -> 104.156.226.72:53258 +Flow 577 not-detected: udp 10.0.2.15:28681 -> 59.148.100.237:23459 +Flow 586 not-detected: udp 10.0.2.15:28681 -> 221.124.66.33:13060 +Flow 618 not-detected: udp 10.0.2.15:28681 -> 1.172.184.48:13281 +Flow 377 not-detected: udp 10.0.2.15:28681 -> 180.200.236.13:12082 +Flow 526 not-detected: udp 10.0.2.15:28681 -> 36.234.197.93:1483 +Flow 669 not-detected: udp 10.0.2.15:28681 -> 218.164.200.235:2846 +Flow 609 not-detected: udp 10.0.2.15:28681 -> 116.241.162.162:59016 +Flow 690 not-detected: udp 10.0.2.15:28681 -> 61.18.212.223:50637 +Flow 441 not-detected: udp 10.0.2.15:28681 -> 36.237.199.108:56040 +Flow 700 not-detected: udp 10.0.2.15:28681 -> 91.206.27.26:6578 +Flow 450 not-detected: udp 10.0.2.15:28681 -> 113.252.206.254:23458 +Flow 592 not-detected: udp 10.0.2.15:28681 -> 1.36.249.91:7190 +Flow 701 not-detected: udp 10.0.2.15:28681 -> 119.237.190.184:64163 +Flow 479 not-detected: udp 10.0.2.15:28681 -> 123.205.13.148:51896 +Flow 603 not-detected: udp 10.0.2.15:28681 -> 1.36.249.91:64577 +Flow 394 not-detected: udp 10.0.2.15:28681 -> 165.84.134.136:21407 +Flow 740 not-detected: udp 10.0.2.15:28681 -> 36.237.25.47:21293 +Flow 646 not-detected: udp 10.0.2.15:28681 -> 36.237.10.152:21293 +Flow 621 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:3227 +Flow 733 not-detected: udp 10.0.2.15:28681 -> 99.199.148.6:4338 +Flow 597 not-detected: udp 10.0.2.15:28681 -> 36.236.203.37:52274 +Flow 675 not-detected: udp 10.0.2.15:28681 -> 123.205.118.77:62191 +Flow 738 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:3256 +Flow 628 not-detected: udp 10.0.2.15:28681 -> 45.65.87.24:16201 +Flow 616 not-detected: udp 10.0.2.15:28681 -> 220.208.167.152:30628 +Flow 596 not-detected: udp 10.0.2.15:28681 -> 61.18.212.223:58954 +Flow 474 not-detected: udp 10.0.2.15:28681 -> 80.61.221.246:45880 +Flow 713 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:51379 +Flow 593 not-detected: udp 10.0.2.15:28681 -> 124.218.26.16:9747 +Flow 571 not-detected: udp 10.0.2.15:28681 -> 114.40.163.123:55341 +Flow 524 not-detected: udp 10.0.2.15:28681 -> 80.193.171.146:65362 +Flow 642 not-detected: udp 10.0.2.15:28681 -> 220.39.142.122:6346 +Flow 477 not-detected: udp 10.0.2.15:28681 -> 94.54.66.82:45640 +Flow 444 not-detected: udp 10.0.2.15:28681 -> 122.117.100.78:9010 +Flow 572 not-detected: udp 10.0.2.15:28681 -> 86.153.21.93:36696 +Flow 478 not-detected: udp 10.0.2.15:28681 -> 36.235.85.44:64914 +Flow 449 not-detected: udp 10.0.2.15:28681 -> 61.238.173.128:8826 +Flow 649 not-detected: udp 10.0.2.15:28681 -> 122.117.100.78:56128 +Flow 461 not-detected: udp 10.0.2.15:28681 -> 69.27.193.124:50555 +Flow 520 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:3339 +Flow 335 not-detected: udp 10.0.2.15:28681 -> 14.200.255.229:37058 +Flow 635 not-detected: udp 10.0.2.15:28681 -> 219.70.48.23:2556 +Flow 636 not-detected: udp 10.0.2.15:28681 -> 80.193.171.146:53143 +Flow 637 not-detected: udp 10.0.2.15:28681 -> 36.233.194.73:1995 +Flow 676 not-detected: udp 10.0.2.15:28681 -> 1.64.208.110:55550 +Flow 722 not-detected: udp 10.0.2.15:28681 -> 213.32.245.121:12333 +Flow 578 not-detected: udp 10.0.2.15:28681 -> 77.205.243.44:46006 +Flow 737 not-detected: udp 10.0.2.15:28681 -> 174.115.127.251:23897 +Flow 584 not-detected: udp 10.0.2.15:28681 -> 80.193.171.146:18360 +Flow 472 not-detected: udp 10.0.2.15:28681 -> 94.54.66.82:45744 +Flow 471 not-detected: udp 10.0.2.15:28681 -> 80.7.252.192:43457 +Flow 744 not-detected: udp 10.0.2.15:28681 -> 164.132.10.25:48250 +Flow 707 not-detected: udp 10.0.2.15:28681 -> 183.179.14.31:64871 +Flow 476 not-detected: udp 10.0.2.15:28681 -> 98.18.172.208:63172 +Flow 381 not-detected: udp 10.0.2.15:28681 -> 77.58.211.52:3806 +Flow 683 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:54459 +Flow 386 not-detected: udp 10.0.2.15:28681 -> 85.172.10.90:40162 +Flow 619 not-detected: udp 10.0.2.15:28681 -> 1.163.14.246:1630 +Flow 691 not-detected: udp 10.0.2.15:28681 -> 61.93.150.146:62507 +Flow 620 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:53516 +Flow 667 not-detected: udp 10.0.2.15:28681 -> 223.18.211.177:18085 +Flow 720 not-detected: udp 10.0.2.15:28681 -> 76.26.178.132:10053 +Flow 443 not-detected: udp 10.0.2.15:28681 -> 183.179.14.31:54754 +Flow 697 not-detected: udp 10.0.2.15:28681 -> 14.199.10.60:53906 +Flow 622 not-detected: udp 10.0.2.15:28681 -> 36.234.18.166:61319 +Flow 714 not-detected: udp 10.0.2.15:28681 -> 76.174.174.69:21358 +Flow 614 not-detected: udp 10.0.2.15:28681 -> 123.205.118.77:60482 +Flow 746 not-detected: udp 10.0.2.15:28681 -> 123.205.126.102:5193 +Flow 606 not-detected: udp 10.0.2.15:28681 -> 149.28.163.175:42288 +Flow 739 not-detected: udp 10.0.2.15:28681 -> 104.156.226.72:19814 +Flow 587 not-detected: udp 10.0.2.15:28681 -> 94.134.154.158:54130 +Flow 550 not-detected: udp 10.0.2.15:28681 -> 220.238.145.82:33527 +Flow 688 not-detected: udp 10.0.2.15:28681 -> 114.36.234.196:11629 +Flow 670 not-detected: udp 10.0.2.15:28681 -> 36.236.203.37:52669 +Flow 598 not-detected: udp 10.0.2.15:28681 -> 1.172.184.48:1512 +Flow 685 not-detected: udp 10.0.2.15:28681 -> 111.241.31.96:8349 +Flow 721 not-detected: udp 10.0.2.15:28681 -> 123.203.72.224:9897 +Flow 631 not-detected: udp 10.0.2.15:28681 -> 36.231.59.187:62234 +Flow 591 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:53707 +Flow 594 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:7375 +Flow 613 not-detected: udp 10.0.2.15:28681 -> 119.247.152.218:51920 +Flow 617 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:7380 +Flow 582 not-detected: udp 10.0.2.15:28681 -> 223.16.83.5:10624 +Flow 568 not-detected: udp 10.0.2.15:28681 -> 123.205.118.77:56562 +Flow 446 not-detected: udp 10.0.2.15:28681 -> 61.70.199.107:60475 +Flow 470 not-detected: udp 10.0.2.15:28681 -> 185.187.74.173:46790 +Flow 623 not-detected: udp 10.0.2.15:28681 -> 210.209.249.84:24751 +Flow 629 not-detected: udp 10.0.2.15:28681 -> 14.200.255.229:45710 +Flow 692 not-detected: udp 10.0.2.15:28681 -> 76.110.153.177:40022 +Flow 604 not-detected: udp 10.0.2.15:28681 -> 123.202.31.113:53291 +Flow 718 not-detected: udp 10.0.2.15:28681 -> 218.102.208.175:9167 +Flow 447 not-detected: udp 10.0.2.15:28681 -> 14.199.10.60:23458 +Flow 451 not-detected: udp 10.0.2.15:28681 -> 218.35.66.21:22234 +Flow 600 not-detected: udp 10.0.2.15:28681 -> 1.64.156.63:60092 +Flow 645 not-detected: udp 10.0.2.15:28681 -> 59.104.173.5:49803 +Flow 661 not-detected: udp 10.0.2.15:28681 -> 24.127.1.235:37814 +Flow 626 not-detected: udp 10.0.2.15:28681 -> 59.104.173.5:49815 +Flow 384 not-detected: udp 10.0.2.15:28681 -> 75.64.6.175:4743 +Flow 378 not-detected: udp 10.0.2.15:28681 -> 118.241.204.61:43366 +Flow 703 not-detected: udp 10.0.2.15:28681 -> 114.40.67.191:14971 +Flow 656 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:54914 +Flow 727 not-detected: udp 10.0.2.15:28681 -> 101.136.187.253:10914 +Flow 456 not-detected: udp 10.0.2.15:28681 -> 89.241.112.255:14766 +Flow 521 not-detected: udp 10.0.2.15:28681 -> 113.255.250.32:23458 +Flow 375 not-detected: udp 10.0.2.15:28681 -> 73.182.136.42:27873 +Flow 455 not-detected: udp 10.0.2.15:28681 -> 58.153.206.183:16919 +Flow 453 not-detected: udp 10.0.2.15:28681 -> 74.127.26.138:3083 +Flow 704 not-detected: udp 10.0.2.15:28681 -> 123.192.83.59:33513 +Flow 641 not-detected: udp 10.0.2.15:28681 -> 36.233.199.103:2625 +Flow 460 not-detected: udp 10.0.2.15:28681 -> 210.194.116.78:8342 +Flow 717 not-detected: udp 10.0.2.15:28681 -> 79.191.58.38:48157 +Flow 742 not-detected: udp 10.0.2.15:28681 -> 194.163.180.126:36780 +Flow 454 not-detected: udp 10.0.2.15:28681 -> 223.16.121.156:23183 +Flow 674 not-detected: udp 10.0.2.15:28681 -> 219.70.1.236:9369 +Flow 672 not-detected: udp 10.0.2.15:28681 -> 223.16.83.5:4765 +Flow 681 not-detected: udp 10.0.2.15:28681 -> 61.220.41.241:53072 +Flow 640 not-detected: udp 10.0.2.15:28681 -> 1.36.249.91:65430 +Flow 682 not-detected: udp 10.0.2.15:28681 -> 203.220.198.244:50896 +Flow 679 not-detected: udp 10.0.2.15:28681 -> 113.252.83.132:57131 +Flow 694 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:6514 +Flow 469 not-detected: udp 10.0.2.15:28681 -> 87.123.54.234:47184 +Flow 665 not-detected: udp 10.0.2.15:28681 -> 82.36.106.134:3927 +Flow 660 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:6527 +Flow 615 not-detected: udp 10.0.2.15:28681 -> 74.195.236.249:18557 +Flow 716 not-detected: udp 10.0.2.15:28681 -> 98.249.190.8:25198 +Flow 731 not-detected: udp 10.0.2.15:28681 -> 50.58.238.163:6564 +Flow 388 not-detected: udp 10.0.2.15:28681 -> 121.7.145.36:33905 +Flow 735 not-detected: udp 10.0.2.15:28681 -> 45.31.152.112:52420 +Flow 747 not-detected: udp 10.0.2.15:28681 -> 50.58.238.163:6599 +Flow 634 not-detected: udp 10.0.2.15:28681 -> 24.179.18.242:47329 +Flow 527 not-detected: udp 10.0.2.15:28681 -> 42.72.149.140:37848 +Flow 643 not-detected: udp 10.0.2.15:28681 -> 31.20.248.147:30706 +Flow 711 not-detected: udp 10.0.2.15:28681 -> 220.129.86.65:49723 +Flow 563 not-detected: udp 10.0.2.15:28681 -> 112.105.52.2:6831 +Flow 639 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:7849 +Flow 729 not-detected: udp 10.0.2.15:28681 -> 114.47.227.91:54463 +Flow 732 not-detected: udp 10.0.2.15:28681 -> 85.168.34.105:39908 +Flow 633 not-detected: udp 10.0.2.15:28681 -> 68.174.18.115:50679 +Flow 607 not-detected: udp 10.0.2.15:28681 -> 111.241.31.96:4814 +Flow 705 not-detected: udp 10.0.2.15:28681 -> 124.218.26.16:8658 +Flow 698 not-detected: udp 10.0.2.15:28681 -> 70.81.219.111:19210 +Flow 595 not-detected: udp 10.0.2.15:28681 -> 175.182.21.156:13732 +Flow 723 not-detected: udp 10.0.2.15:28681 -> 175.39.219.223:13482 +Flow 376 not-detected: udp 10.0.2.15:28681 -> 156.57.42.2:33476 +Flow 673 not-detected: udp 10.0.2.15:28681 -> 125.59.215.249:14571 +Flow 611 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:59384 +Flow 724 not-detected: udp 10.0.2.15:28681 -> 1.65.217.224:9070 +Flow 666 not-detected: udp 10.0.2.15:28681 -> 159.196.95.223:2003 +Flow 644 not-detected: udp 10.0.2.15:28681 -> 173.22.22.94:34245 +Flow 648 not-detected: udp 10.0.2.15:28681 -> 180.218.135.222:4548 +Flow 579 not-detected: udp 10.0.2.15:28681 -> 223.16.170.108:23458 +Flow 677 not-detected: udp 10.0.2.15:28681 -> 223.16.83.5:9128 +Flow 706 not-detected: udp 10.0.2.15:28681 -> 218.164.200.235:1968 +Flow 654 not-detected: udp 10.0.2.15:28681 -> 84.118.116.198:44616 +Flow 725 not-detected: udp 10.0.2.15:28681 -> 219.91.30.216:61635 +Flow 302 not-detected: udp 10.0.2.15:28681 -> 185.187.74.173:53489 +Flow 668 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:64731 +Flow 741 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:4364 +Flow 696 not-detected: udp 10.0.2.15:28681 -> 188.165.203.190:55050 +Flow 585 not-detected: udp 10.0.2.15:28681 -> 51.68.153.214:35004 +Flow 686 not-detected: udp 10.0.2.15:28681 -> 119.14.143.237:13965 +Flow 662 not-detected: udp 10.0.2.15:28681 -> 96.59.117.166:33192 +Flow 602 not-detected: udp 10.0.2.15:28681 -> 123.203.72.224:53658 +Flow 589 not-detected: udp 10.0.2.15:28681 -> 113.255.250.32:52647 +Flow 653 not-detected: udp 10.0.2.15:28681 -> 82.12.1.136:6348 +Flow 458 not-detected: udp 10.0.2.15:28681 -> 118.165.228.167:12201 +Flow 525 not-detected: udp 10.0.2.15:28681 -> 113.255.250.32:52660 +Flow 610 not-detected: udp 10.0.2.15:28681 -> 61.10.174.159:4841 +Flow 734 not-detected: udp 10.0.2.15:28681 -> 113.252.91.201:4297 +Flow 627 not-detected: udp 10.0.2.15:28681 -> 73.62.225.181:46843 +Flow 380 not-detected: udp 10.0.2.15:28681 -> 83.86.49.195:12019 +Flow 702 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10728 +Flow 650 not-detected: udp 10.0.2.15:28681 -> 114.47.227.91:58856 +Flow 581 not-detected: udp 10.0.2.15:28681 -> 58.115.108.10:4641 +Flow 612 not-detected: udp 10.0.2.15:28681 -> 106.104.88.139:7423 +Flow 583 not-detected: udp 10.0.2.15:28681 -> 87.75.180.80:35361 +Flow 671 not-detected: udp 10.0.2.15:28681 -> 180.218.135.222:49867 +Flow 574 not-detected: udp 10.0.2.15:28681 -> 223.17.132.18:23458 +Flow 678 not-detected: udp 10.0.2.15:28681 -> 150.116.225.105:51438 +Flow 715 not-detected: udp 10.0.2.15:28681 -> 219.71.72.88:58808 +Flow 659 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10791 +Flow 457 not-detected: udp 10.0.2.15:28681 -> 119.247.240.113:13867 +Flow 564 not-detected: udp 10.0.2.15:28681 -> 61.222.160.99:53144 +Flow 647 not-detected: udp 10.0.2.15:28681 -> 61.18.212.223:58290 +Flow 699 not-detected: udp 10.0.2.15:28681 -> 77.222.213.44:26536 +Flow 651 not-detected: udp 10.0.2.15:28681 -> 1.64.156.63:65023 +Flow 658 not-detected: udp 10.0.2.15:28681 -> 119.14.143.237:8075 +Flow 712 not-detected: udp 10.0.2.15:28681 -> 185.187.74.173:59978 +Flow 657 not-detected: udp 10.0.2.15:28681 -> 61.222.160.99:53195 +Flow 576 not-detected: udp 10.0.2.15:28681 -> 104.238.172.250:42925 +Flow 570 not-detected: udp 10.0.2.15:28681 -> 97.83.183.148:8890 +Flow 680 not-detected: udp 10.0.2.15:28681 -> 61.227.198.100:6910 +Flow 566 not-detected: udp 10.0.2.15:28681 -> 58.176.62.40:52755 +Flow 599 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:59875 +Flow 601 not-detected: udp 10.0.2.15:28681 -> 113.255.200.161:65274 +Flow 638 not-detected: udp 10.0.2.15:28681 -> 182.155.242.225:15068 +Flow 463 not-detected: udp 10.0.2.15:28681 -> 200.7.155.210:28365 +Flow 726 not-detected: udp 10.0.2.15:28681 -> 1.171.82.65:50072 +Flow 452 not-detected: udp 10.0.2.15:28681 -> 68.227.193.37:27481 +Flow 608 not-detected: udp 10.0.2.15:28681 -> 1.163.14.246:23461 +Flow 736 not-detected: udp 10.0.2.15:28681 -> 118.166.252.163:14391 +Flow 448 not-detected: udp 10.0.2.15:28681 -> 116.241.162.162:15677 +Flow 549 not-detected: udp 10.0.2.15:28681 -> 84.211.151.48:11105 +Flow 459 not-detected: udp 10.0.2.15:28681 -> 100.89.84.59:11603 +Flow 625 not-detected: udp 10.0.2.15:28681 -> 113.252.206.254:49737 +Flow 580 not-detected: udp 10.0.2.15:28681 -> 76.119.55.28:20347 +Flow 624 not-detected: udp 10.0.2.15:28681 -> 61.238.173.128:57492 +Flow 567 not-detected: udp 10.0.2.15:28681 -> 58.176.62.40:52889 +Flow 684 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:54436 +Flow 743 not-detected: udp 10.0.2.15:28681 -> 27.94.154.53:6346 +Flow 730 not-detected: udp 10.0.2.15:28681 -> 124.217.188.105:62849 +Flow 710 not-detected: udp 10.0.2.15:28681 -> 113.254.140.225:63637 +Flow 709 not-detected: udp 10.0.2.15:28681 -> 223.16.121.156:3624 +Flow 687 not-detected: udp 10.0.2.15:28681 -> 66.30.221.181:53454 +Flow 445 not-detected: udp 10.0.2.15:28681 -> 118.165.153.100:4509 +Flow 652 not-detected: udp 10.0.2.15:28681 -> 94.139.21.182:50110 +Flow 569 not-detected: udp 10.0.2.15:28681 -> 73.89.249.8:50649 +Flow 393 not-detected: udp 10.0.2.15:28681 -> 58.115.158.103:5110 +Flow 464 not-detected: udp 10.0.2.15:28681 -> 101.128.66.8:34512 +Flow 522 not-detected: udp 10.0.2.15:28681 -> 119.247.152.218:51153 +Flow 480 not-detected: udp 10.0.2.15:28681 -> 112.119.74.26:65498 +Flow 382 not-detected: udp 10.0.2.15:28681 -> 76.175.11.126:40958 +Flow 590 not-detected: udp 10.0.2.15:28681 -> 95.10.205.67:48380 +Flow 605 not-detected: udp 10.0.2.15:28681 -> 180.149.125.139:6578 +Flow 689 not-detected: udp 10.0.2.15:28681 -> 1.65.217.224:3688 +Flow 664 not-detected: udp 10.0.2.15:28681 -> 1.172.183.237:4983 +Flow 708 not-detected: udp 10.0.2.15:28681 -> 124.244.68.65:51967 +Flow 655 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:2566 +Flow 728 not-detected: udp 10.0.2.15:28681 -> 112.10.134.44:19739 +Flow 548 not-detected: udp 10.0.2.15:28681 -> 74.50.147.205:17735 +Flow 632 not-detected: udp 10.0.2.15:28681 -> 188.149.2.44:20964 +Flow 475 not-detected: udp 10.0.2.15:28681 -> 188.61.52.183:63978 +Flow 473 not-detected: udp 10.0.2.15:28681 -> 142.132.165.13:33564 +Flow 575 not-detected: udp 10.0.2.15:28681 -> 123.202.31.113:19768 +Flow 588 not-detected: udp 10.0.2.15:28681 -> 219.70.175.103:4315 +Flow 379 not-detected: udp 10.0.2.15:28681 -> 80.140.63.147:29545 +Flow 719 not-detected: udp 10.0.2.15:28681 -> 219.85.11.85:10722 +Flow 442 not-detected: udp 10.0.2.15:28681 -> 89.204.130.55:29545 +Flow 630 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:3931 +Flow 565 not-detected: udp 10.0.2.15:28681 -> 114.45.40.28:2656 +Flow 523 not-detected: udp 10.0.2.15:28681 -> 1.162.138.200:24018 +Flow 693 not-detected: udp 10.0.2.15:28681 -> 98.215.130.156:12405 Flow 760 risky: udp 10.0.2.15:138 -> 10.0.2.255:138 Flow 764 risky: udp 10.0.2.15:28681 -> 208.92.106.151:32476 Flow 762 risky: udp 10.0.2.15:28681 -> 86.75.43.182:43502 Flow 763 risky: udp 10.0.2.15:28681 -> 85.170.209.214:46210 Flow 761 risky: udp 10.0.2.15:28681 -> 195.132.75.56:56009 +Flow 544 not-detected: udp 10.0.2.15:28681 -> 111.184.29.35:30582 +Flow 533 not-detected: udp 10.0.2.15:28681 -> 36.229.185.60:6898 +Flow 553 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:3259 +Flow 546 not-detected: udp 10.0.2.15:28681 -> 38.142.119.234:49867 +Flow 531 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:51497 +Flow 534 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:54436 +Flow 562 not-detected: udp 10.0.2.15:28681 -> 112.119.242.110:59879 +Flow 542 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:51675 +Flow 551 not-detected: udp 10.0.2.15:28681 -> 92.24.129.230:14766 +Flow 555 not-detected: udp 10.0.2.15:28681 -> 124.218.26.16:20387 +Flow 538 not-detected: udp 10.0.2.15:28681 -> 124.218.41.253:14339 +Flow 536 not-detected: udp 10.0.2.15:28681 -> 118.167.222.160:56121 +Flow 558 not-detected: udp 10.0.2.15:28681 -> 112.105.52.2:6466 +Flow 556 not-detected: udp 10.0.2.15:28681 -> 59.104.173.5:49787 +Flow 560 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:53883 +Flow 559 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:55080 +Flow 529 not-detected: udp 10.0.2.15:28681 -> 116.241.162.162:57929 +Flow 539 not-detected: udp 10.0.2.15:28681 -> 119.14.143.237:7510 +Flow 545 not-detected: udp 10.0.2.15:28681 -> 116.49.159.77:55915 +Flow 663 not-detected: udp 10.0.2.15:28681 -> 50.58.238.163:6594 +Flow 554 not-detected: udp 10.0.2.15:28681 -> 123.203.72.224:55577 +Flow 528 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:58442 +Flow 537 not-detected: udp 10.0.2.15:28681 -> 218.164.200.235:2034 +Flow 535 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10655 +Flow 532 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10677 +Flow 695 not-detected: udp 10.0.2.15:28681 -> 76.189.72.230:8161 +Flow 552 not-detected: udp 10.0.2.15:28681 -> 218.250.6.59:60012 +Flow 543 not-detected: udp 10.0.2.15:28681 -> 114.39.159.60:56896 +Flow 557 not-detected: udp 10.0.2.15:28681 -> 61.222.160.99:53163 +Flow 561 not-detected: udp 10.0.2.15:28681 -> 61.238.173.128:57466 +Flow 541 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:11141 +Flow 547 not-detected: udp 10.0.2.15:28681 -> 213.229.111.224:43316 +Flow 530 not-detected: udp 10.0.2.15:28681 -> 118.167.248.220:59304 +Flow 540 not-detected: udp 10.0.2.15:28681 -> 36.236.203.37:52131 +Flow 754 not-detected: udp 10.0.2.15:28681 -> 84.125.218.84:17561 +Flow 573 not-detected: udp 10.0.2.15:28681 -> 71.239.173.18:23327 +Flow 383 not-detected: udp 10.0.2.15:28681 -> 84.71.243.60:34498 Flow 787 risky: udp 10.0.2.15:28681 -> 220.133.122.217:23458 Flow 793 risky: udp 10.0.2.15:28681 -> 123.205.126.102:5193 Flow 792 risky: udp 10.0.2.15:28681 -> 36.239.213.146:21750 @@ -352,7 +663,95 @@ Flow 789 risky: udp 10.0.2.15:28681 -> 42.98.115.128:23458 Flow 790 risky: udp 10.0.2.15:28681 -> 218.164.39.233:20855 Flow 785 risky: udp 10.0.2.15:28681 -> 176.134.139.39:6346 Flow 791 risky: udp 10.0.2.15:28681 -> 219.85.11.85:10722 +Flow 52 not-detected: tcp 10.0.2.15:50212 -> 95.17.124.40:6776 +Flow 777 not-detected: udp 10.0.2.15:28681 -> 124.244.211.43:23459 +Flow 245 not-detected: tcp 10.0.2.15:50289 -> 74.195.236.249:18557 +Flow 776 not-detected: udp 10.0.2.15:28681 -> 219.85.10.83:8797 +Flow 227 not-detected: tcp 10.0.2.15:50273 -> 24.179.18.242:47329 +Flow 767 not-detected: udp 10.0.2.15:28681 -> 45.65.87.24:16201 +Flow 72 not-detected: tcp 10.0.2.15:50231 -> 76.68.138.207:45079 +Flow 228 not-detected: tcp 10.0.2.15:50274 -> 68.174.18.115:50679 +Flow 778 not-detected: udp 10.0.2.15:28681 -> 122.117.100.78:9010 +Flow 773 not-detected: udp 10.0.2.15:28681 -> 86.153.21.93:36696 +Flow 779 not-detected: udp 10.0.2.15:28681 -> 1.65.217.224:18381 +Flow 768 not-detected: udp 10.0.2.15:28681 -> 14.200.255.229:37058 +Flow 765 not-detected: udp 10.0.2.15:28681 -> 213.229.111.224:4876 +Flow 75 not-detected: tcp 10.0.2.15:50234 -> 66.189.28.17:16269 +Flow 240 not-detected: tcp 10.0.2.15:50286 -> 84.118.116.198:44616 +Flow 74 not-detected: tcp 10.0.2.15:50233 -> 1.163.14.246:12854 +Flow 152 not-detected: tcp 10.0.2.15:50265 -> 113.255.250.32:52647 Flow 796 risky: udp 10.0.2.15:28681 -> 41.249.63.200:22582 +Flow 233 not-detected: tcp 10.0.2.15:50279 -> 113.252.91.201:4297 +Flow 123 not-detected: tcp 10.0.2.15:50254 -> 24.78.134.188:49046 Flow 333 risky: tcp 10.0.2.15:50327 -> 69.118.162.229:46906 +Flow 64 not-detected: tcp 10.0.2.15:50223 -> 118.167.248.220:63108 +Flow 59 not-detected: tcp 10.0.2.15:50218 -> 90.103.247.94:59045 +Flow 49 not-detected: tcp 10.0.2.15:50209 -> 113.252.206.254:49587 +Flow 65 not-detected: tcp 10.0.2.15:50224 -> 78.125.63.97:6346 +Flow 68 not-detected: tcp 10.0.2.15:50227 -> 111.246.157.94:51175 +Flow 56 not-detected: tcp 10.0.2.15:50215 -> 124.244.64.237:4704 +Flow 71 not-detected: tcp 10.0.2.15:50230 -> 73.3.103.37:17296 +Flow 244 not-detected: tcp 10.0.2.15:50288 -> 76.119.55.28:20347 +Flow 47 not-detected: tcp 10.0.2.15:50207 -> 90.78.171.204:6346 +Flow 281 not-detected: tcp 10.0.2.15:50305 -> 94.54.66.82:63637 +Flow 48 not-detected: tcp 10.0.2.15:50208 -> 119.237.116.22:8683 +Flow 266 not-detected: tcp 10.0.2.15:50290 -> 73.89.249.8:50649 +Flow 78 not-detected: tcp 10.0.2.15:50237 -> 88.123.202.175:37910 +Flow 151 not-detected: tcp 10.0.2.15:50264 -> 95.10.205.67:48380 +Flow 89 not-detected: tcp 10.0.2.15:50244 -> 188.61.52.183:63978 +Flow 92 not-detected: tcp 10.0.2.15:50247 -> 66.30.221.181:51560 +Flow 784 not-detected: udp 10.0.2.15:28681 -> 23.19.141.110:6346 +Flow 774 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:6599 +Flow 268 not-detected: tcp 10.0.2.15:50292 -> 95.10.205.67:11603 +Flow 84 not-detected: tcp 10.0.2.15:50243 -> 176.138.129.252:27962 +Flow 142 not-detected: tcp 10.0.2.15:50255 -> 36.236.203.37:52165 +Flow 241 not-detected: tcp 10.0.2.15:50287 -> 98.215.130.156:12405 +Flow 236 not-detected: tcp 10.0.2.15:50282 -> 221.124.66.33:13060 +Flow 226 not-detected: tcp 10.0.2.15:50272 -> 1.172.184.48:13298 +Flow 225 not-detected: tcp 10.0.2.15:50271 -> 218.164.198.27:60202 +Flow 224 not-detected: tcp 10.0.2.15:50270 -> 114.27.24.95:11427 +Flow 145 not-detected: tcp 10.0.2.15:50258 -> 122.100.216.210:7097 +Flow 147 not-detected: tcp 10.0.2.15:50260 -> 113.255.200.161:51394 +Flow 81 not-detected: tcp 10.0.2.15:50240 -> 36.237.10.152:21293 +Flow 57 not-detected: tcp 10.0.2.15:50216 -> 182.155.128.228:3256 +Flow 44 not-detected: tcp 10.0.2.15:50204 -> 124.218.26.16:9728 +Flow 771 not-detected: udp 10.0.2.15:28681 -> 202.27.193.6:6346 +Flow 234 not-detected: tcp 10.0.2.15:50280 -> 99.199.148.6:4338 +Flow 229 not-detected: tcp 10.0.2.15:50275 -> 122.117.100.78:9010 +Flow 781 not-detected: udp 10.0.2.15:28681 -> 112.105.52.2:23458 +Flow 782 not-detected: udp 10.0.2.15:28681 -> 65.182.231.232:7890 +Flow 39 not-detected: tcp 10.0.2.15:50200 -> 176.128.217.128:45194 +Flow 769 not-detected: udp 10.0.2.15:28681 -> 123.110.61.169:11973 +Flow 53 not-detected: tcp 10.0.2.15:50213 -> 85.117.153.7:50138 +Flow 82 not-detected: tcp 10.0.2.15:50241 -> 98.18.172.208:63172 +Flow 297 not-detected: tcp 10.0.2.15:50321 -> 213.229.111.224:4876 +Flow 775 not-detected: udp 10.0.2.15:28681 -> 223.17.132.18:23458 +Flow 79 not-detected: tcp 10.0.2.15:50238 -> 124.218.41.253:59144 +Flow 230 not-detected: tcp 10.0.2.15:50276 -> 96.246.156.126:56070 +Flow 70 not-detected: tcp 10.0.2.15:50229 -> 1.36.249.91:64920 Flow 795 risky: udp 10.0.2.15:28681 -> 213.120.26.86:29946 +Flow 33 not-detected: tcp 10.0.2.15:50195 -> 162.157.143.201:29762 +Flow 91 not-detected: tcp 10.0.2.15:50246 -> 80.7.252.192:45685 +Flow 50 not-detected: tcp 10.0.2.15:50210 -> 36.234.18.166:61404 +Flow 45 not-detected: tcp 10.0.2.15:50205 -> 114.46.139.171:52120 +Flow 772 not-detected: udp 10.0.2.15:28681 -> 73.192.231.237:9676 +Flow 770 not-detected: udp 10.0.2.15:28681 -> 97.83.183.148:8890 +Flow 235 not-detected: tcp 10.0.2.15:50281 -> 94.134.154.158:54130 +Flow 60 not-detected: tcp 10.0.2.15:50219 -> 193.121.165.12:55376 Flow 334 risky: tcp 10.0.2.15:50328 -> 189.147.72.83:26108 +Flow 80 not-detected: tcp 10.0.2.15:50239 -> 112.105.52.2:6384 +Flow 232 not-detected: tcp 10.0.2.15:50278 -> 36.231.59.187:62234 +Flow 766 not-detected: udp 10.0.2.15:28681 -> 76.119.55.28:20347 +Flow 120 not-detected: tcp 10.0.2.15:50251 -> 24.127.1.235:37814 +Flow 144 not-detected: tcp 10.0.2.15:50257 -> 219.70.48.23:3054 +Flow 286 not-detected: tcp 10.0.2.15:50310 -> 76.110.153.177:40022 +Flow 40 not-detected: tcp 10.0.2.15:50201 -> 78.122.93.185:6346 +Flow 58 not-detected: tcp 10.0.2.15:50217 -> 113.252.86.162:54958 +Flow 32 not-detected: tcp 10.0.2.15:50194 -> 92.152.66.153:43771 +Flow 83 not-detected: tcp 10.0.2.15:50242 -> 109.210.203.131:6346 +Flow 66 not-detected: tcp 10.0.2.15:50225 -> 109.210.81.147:24800 +Flow 150 not-detected: tcp 10.0.2.15:50263 -> 73.182.136.42:27873 +Flow 62 not-detected: tcp 10.0.2.15:50221 -> 59.104.173.5:49956 +Flow 780 not-detected: udp 10.0.2.15:28681 -> 68.66.94.132:17735 +Flow 55 not-detected: tcp 10.0.2.15:50214 -> 80.193.171.146:53808 +Flow 231 not-detected: tcp 10.0.2.15:50277 -> 82.181.251.218:36368 diff --git a/test/results/flow-captured/default/gtp_false_positive.pcapng.out b/test/results/flow-captured/default/gtp_false_positive.pcapng.out index e69de29bb..beb143597 100644 --- a/test/results/flow-captured/default/gtp_false_positive.pcapng.out +++ b/test/results/flow-captured/default/gtp_false_positive.pcapng.out @@ -0,0 +1 @@ +Flow 1 not-detected: udp 24.1.33.66:29255 -> 62.56.122.232:3386 diff --git a/test/results/flow-captured/default/instagram.pcap.out b/test/results/flow-captured/default/instagram.pcap.out index fb7493269..1574dfaae 100644 --- a/test/results/flow-captured/default/instagram.pcap.out +++ b/test/results/flow-captured/default/instagram.pcap.out @@ -5,3 +5,4 @@ Flow 26 midstream: tcp 192.168.0.103:58052 -> 82.85.26.162:80 Flow 30 midstream: tcp 192.168.0.103:58690 -> 46.33.70.159:443 Flow 1 risky: tcp 192.168.0.103:56382 -> 173.252.107.4:443 Flow 2 midstream: tcp 192.168.0.103:33936 -> 31.13.93.52:443 +Flow 11 not-detected: udp 192.168.0.1:520 -> 192.168.0.255:520 diff --git a/test/results/flow-captured/default/ip_fragmented_garbage.pcap.out b/test/results/flow-captured/default/ip_fragmented_garbage.pcap.out index e69de29bb..75a13d27c 100644 --- a/test/results/flow-captured/default/ip_fragmented_garbage.pcap.out +++ b/test/results/flow-captured/default/ip_fragmented_garbage.pcap.out @@ -0,0 +1,42 @@ +Flow 4 not-detected: tcp 10.0.0.2:16417 -> 10.128.0.2:16419 +Flow 8 not-detected: tcp 10.0.0.2:9508 -> 10.128.0.2:8995 +Flow 20 not-detected: tcp 10.0.0.2:9508 -> 10.128.0.2:8998 +Flow 7 not-detected: tcp 10.0.0.2:10790 -> 10.128.0.2:24101 +Flow 1 not-detected: tcp 10.0.0.2:24102 -> 10.128.0.2:10792 +Flow 2 not-detected: tcp 10.0.0.2:18730 -> 10.128.0.2:20304 +Flow 2 midstream: tcp 10.0.0.2:18730 -> 10.128.0.2:20304 +Flow 24 not-detected: tcp 10.0.0.2:24136 -> 10.128.0.2:16967 +Flow 24 midstream: tcp 10.0.0.2:24136 -> 10.128.0.2:16967 +Flow 27 not-detected: tcp 10.0.0.2:17751 -> 10.128.0.2:9024 +Flow 10 not-detected: tcp 10.0.0.2:14387 -> 10.128.0.2:14646 +Flow 10 midstream: tcp 10.0.0.2:14387 -> 10.128.0.2:14646 +Flow 16 not-detected: tcp 10.0.0.2:16199 -> 10.128.0.2:21055 +Flow 23 not-detected: tcp 10.0.0.2:18762 -> 10.128.0.2:18503 +Flow 11 not-detected: tcp 10.0.0.2:18248 -> 10.128.0.2:19019 +Flow 11 midstream: tcp 10.0.0.2:18248 -> 10.128.0.2:19019 +Flow 13 not-detected: tcp 10.0.0.2:16243 -> 10.128.0.2:21055 +Flow 28 not-detected: tcp 10.0.0.2:27502 -> 10.128.0.2:30307 +Flow 6 not-detected: tcp 10.0.0.2:24101 -> 10.128.0.2:9251 +Flow 3 not-detected: tcp 10.0.0.2:9253 -> 10.128.0.2:24102 +Flow 26 not-detected: tcp 10.0.0.2:9251 -> 10.128.0.2:9770 +Flow 25 not-detected: tcp 10.0.0.2:29799 -> 10.128.0.2:26228 +Flow 5 not-detected: tcp 10.0.0.2:21029 -> 10.128.0.2:22878 +Flow 5 midstream: tcp 10.0.0.2:21029 -> 10.128.0.2:22878 +Flow 29 not-detected: tcp 10.0.0.2:10792 -> 10.128.0.2:10790 +Flow 15 not-detected: tcp 10.0.0.2:2612 -> 10.128.0.2:12849 +Flow 15 midstream: tcp 10.0.0.2:2612 -> 10.128.0.2:12849 +Flow 12 not-detected: tcp 10.0.0.2:13105 -> 10.128.0.2:14648 +Flow 12 midstream: tcp 10.0.0.2:13105 -> 10.128.0.2:14648 +Flow 21 not-detected: tcp 10.0.0.2:13362 -> 10.128.0.2:12596 +Flow 21 midstream: tcp 10.0.0.2:13362 -> 10.128.0.2:12596 +Flow 17 not-detected: tcp 10.0.0.2:19273 -> 10.128.0.2:19016 +Flow 17 midstream: tcp 10.0.0.2:19273 -> 10.128.0.2:19016 +Flow 18 not-detected: tcp 10.0.0.2:9566 -> 10.128.0.2:18498 +Flow 18 midstream: tcp 10.0.0.2:9566 -> 10.128.0.2:18498 +Flow 19 not-detected: tcp 10.0.0.2:11892 -> 10.128.0.2:26470 +Flow 14 not-detected: tcp 10.0.0.2:17458 -> 10.128.0.2:10790 +Flow 14 midstream: tcp 10.0.0.2:17458 -> 10.128.0.2:10790 +Flow 9 not-detected: tcp 10.0.0.2:13617 -> 10.128.0.2:10536 +Flow 9 midstream: tcp 10.0.0.2:13617 -> 10.128.0.2:10536 +Flow 22 not-detected: tcp 10.0.0.2:18258 -> 10.128.0.2:16199 +Flow 22 midstream: tcp 10.0.0.2:18258 -> 10.128.0.2:16199 diff --git a/test/results/flow-captured/default/kerberos.pcap.out b/test/results/flow-captured/default/kerberos.pcap.out index 4dc46dfe3..63e68b934 100644 --- a/test/results/flow-captured/default/kerberos.pcap.out +++ b/test/results/flow-captured/default/kerberos.pcap.out @@ -1,3 +1,7 @@ +Flow 11 not-detected: tcp 172.16.8.201:49165 -> 172.16.8.8:49155 +Flow 11 midstream: tcp 172.16.8.201:49165 -> 172.16.8.8:49155 +Flow 26 not-detected: tcp 172.16.8.201:49185 -> 172.16.8.8:49155 +Flow 26 midstream: tcp 172.16.8.201:49185 -> 172.16.8.8:49155 Flow 1 midstream: tcp 172.16.8.201:49157 -> 172.16.8.8:88 Flow 4 midstream: tcp 172.16.8.201:49160 -> 172.16.8.8:88 Flow 8 midstream: tcp 172.16.8.201:49166 -> 172.16.8.8:88 diff --git a/test/results/flow-captured/default/kontiki.pcap.out b/test/results/flow-captured/default/kontiki.pcap.out index ee389391f..a96831119 100644 --- a/test/results/flow-captured/default/kontiki.pcap.out +++ b/test/results/flow-captured/default/kontiki.pcap.out @@ -1,2 +1,4 @@ Flow 3 risky: udp 10.25.32.59:19948 -> 64.200.148.86:8888 +Flow 1 not-detected: udp 10.25.32.59:19948 -> 255.255.255.255:19948 +Flow 2 not-detected: udp 10.25.32.59:19948 -> 64.200.148.82:1948 Flow 5 risky: udp 10.25.32.59:19948 -> 64.200.148.88:80 diff --git a/test/results/flow-captured/default/log4j-webapp-exploit.pcap.out b/test/results/flow-captured/default/log4j-webapp-exploit.pcap.out index f9f40ec93..d7be1a0c7 100644 --- a/test/results/flow-captured/default/log4j-webapp-exploit.pcap.out +++ b/test/results/flow-captured/default/log4j-webapp-exploit.pcap.out @@ -1,5 +1,7 @@ Flow 5 risky: tcp 172.16.238.10:57742 -> 172.16.238.11:1389 Flow 1 risky: tcp 172.16.238.1:1984 -> 172.16.238.10:8080 +Flow 4 not-detected: tcp 172.16.238.10:55408 -> 10.10.10.31:9001 +Flow 7 not-detected: tcp 172.16.238.10:55498 -> 10.10.10.31:9001 Flow 3 risky: tcp 172.16.238.10:48444 -> 172.16.238.11:80 Flow 6 risky: tcp 172.16.238.10:48534 -> 172.16.238.11:80 Flow 2 risky: tcp 172.16.238.10:57650 -> 172.16.238.11:1389 diff --git a/test/results/flow-captured/default/nest_log_sink.pcap.out b/test/results/flow-captured/default/nest_log_sink.pcap.out index 6c40f7682..dea8bb13a 100644 --- a/test/results/flow-captured/default/nest_log_sink.pcap.out +++ b/test/results/flow-captured/default/nest_log_sink.pcap.out @@ -1,3 +1,4 @@ Flow 1 guessed: tcp 192.168.242.15:63340 -> 35.174.82.237:11095 +Flow 1 not-detected: tcp 192.168.242.15:63340 -> 35.174.82.237:11095 Flow 1 midstream: tcp 192.168.242.15:63340 -> 35.174.82.237:11095 Flow 10 risky: udp 192.168.242.15:52849 -> 192.168.242.1:53 diff --git a/test/results/flow-captured/default/ossfuzz_seed_fake_traces_4.pcapng.out b/test/results/flow-captured/default/ossfuzz_seed_fake_traces_4.pcapng.out index e69de29bb..02806735d 100644 --- a/test/results/flow-captured/default/ossfuzz_seed_fake_traces_4.pcapng.out +++ b/test/results/flow-captured/default/ossfuzz_seed_fake_traces_4.pcapng.out @@ -0,0 +1 @@ +Flow 1 not-detected: udp 127.0.0.1:100 -> 127.0.0.1:200 diff --git a/test/results/flow-captured/default/pps.pcap.out b/test/results/flow-captured/default/pps.pcap.out index 73e527fd0..3fed84771 100644 --- a/test/results/flow-captured/default/pps.pcap.out +++ b/test/results/flow-captured/default/pps.pcap.out @@ -1,10 +1,17 @@ +Flow 22 not-detected: udp 192.168.115.8:22793 -> 222.26.193.119:7133 Flow 54 risky: tcp 192.168.115.8:50486 -> 77.234.40.96:80 Flow 54 midstream: tcp 192.168.115.8:50486 -> 77.234.40.96:80 +Flow 25 not-detected: udp 192.168.115.8:22793 -> 115.157.62.243:29006 +Flow 13 not-detected: udp 192.168.115.8:22793 -> 111.250.102.66:1107 Flow 64 risky: tcp 192.168.5.15:65127 -> 68.233.253.133:80 Flow 64 midstream: tcp 192.168.5.15:65127 -> 68.233.253.133:80 Flow 78 risky: tcp 192.168.5.15:65128 -> 68.233.253.133:80 Flow 78 midstream: tcp 192.168.5.15:65128 -> 68.233.253.133:80 +Flow 24 not-detected: udp 192.168.115.8:22793 -> 222.26.74.190:1037 +Flow 26 not-detected: udp 192.168.115.8:22793 -> 210.44.232.243:21044 +Flow 27 not-detected: udp 192.168.115.8:22793 -> 1.169.136.116:17951 Flow 39 midstream: tcp 192.168.115.8:50466 -> 203.66.182.24:80 +Flow 33 not-detected: udp 192.168.115.8:22793 -> 220.130.154.23:35941 Flow 57 midstream: tcp 192.168.115.8:50488 -> 223.26.106.20:80 Flow 60 risky: tcp 192.168.115.8:50491 -> 223.26.106.66:80 Flow 60 midstream: tcp 192.168.115.8:50491 -> 223.26.106.66:80 @@ -16,12 +23,14 @@ Flow 85 risky: tcp 192.168.115.8:50507 -> 223.26.106.19:80 Flow 85 midstream: tcp 192.168.115.8:50507 -> 223.26.106.19:80 Flow 88 risky: tcp 192.168.115.8:50508 -> 223.26.106.19:80 Flow 88 midstream: tcp 192.168.115.8:50508 -> 223.26.106.19:80 +Flow 32 not-detected: udp 192.168.115.8:22793 -> 114.47.91.129:22576 Flow 37 risky: tcp 192.168.115.8:50463 -> 101.227.200.11:80 Flow 37 midstream: tcp 192.168.115.8:50463 -> 101.227.200.11:80 Flow 47 risky: tcp 192.168.115.8:50476 -> 101.227.32.39:80 Flow 47 midstream: tcp 192.168.115.8:50476 -> 101.227.32.39:80 Flow 67 risky: tcp 192.168.115.8:50496 -> 101.227.200.11:80 Flow 67 midstream: tcp 192.168.115.8:50496 -> 101.227.200.11:80 +Flow 6 not-detected: udp 192.168.115.8:22793 -> 111.249.53.196:32443 Flow 90 risky: tcp 192.168.115.8:50766 -> 223.26.106.20:80 Flow 90 midstream: tcp 192.168.115.8:50766 -> 223.26.106.20:80 Flow 91 risky: tcp 192.168.115.8:50767 -> 223.26.106.20:80 @@ -30,12 +39,16 @@ Flow 93 risky: tcp 192.168.115.8:50768 -> 223.26.106.19:80 Flow 93 midstream: tcp 192.168.115.8:50768 -> 223.26.106.19:80 Flow 102 midstream: tcp 192.168.115.8:50778 -> 223.26.106.20:80 Flow 105 midstream: tcp 192.168.115.8:50780 -> 223.26.106.20:80 +Flow 3 not-detected: udp 192.168.115.8:22793 -> 114.42.0.158:7716 +Flow 12 not-detected: udp 192.168.115.8:22793 -> 210.44.171.1:29702 Flow 58 risky: tcp 192.168.115.8:50489 -> 119.188.13.188:80 Flow 58 midstream: tcp 192.168.115.8:50489 -> 119.188.13.188:80 Flow 59 risky: tcp 192.168.115.8:50490 -> 119.188.13.188:80 Flow 59 midstream: tcp 192.168.115.8:50490 -> 119.188.13.188:80 Flow 94 risky: tcp 192.168.115.8:50769 -> 101.227.200.11:80 Flow 94 midstream: tcp 192.168.115.8:50769 -> 101.227.200.11:80 +Flow 4 not-detected: udp 192.168.115.8:22793 -> 222.197.138.12:6956 +Flow 2 not-detected: udp 118.171.15.56:5544 -> 192.168.115.8:22793 Flow 40 risky: tcp 192.168.115.8:50467 -> 202.108.14.219:80 Flow 40 midstream: tcp 192.168.115.8:50467 -> 202.108.14.219:80 Flow 41 risky: tcp 192.168.115.8:50469 -> 202.108.14.219:80 @@ -68,15 +81,23 @@ Flow 76 risky: tcp 192.168.115.8:50502 -> 202.108.14.236:80 Flow 76 midstream: tcp 192.168.115.8:50502 -> 202.108.14.236:80 Flow 79 risky: tcp 192.168.115.8:50503 -> 202.108.14.219:80 Flow 79 midstream: tcp 192.168.115.8:50503 -> 202.108.14.219:80 +Flow 23 not-detected: udp 192.168.115.8:22793 -> 114.37.142.173:1074 +Flow 7 not-detected: udp 192.168.115.8:22793 -> 219.228.107.156:1250 +Flow 16 not-detected: udp 192.168.115.8:22793 -> 36.233.39.81:18590 Flow 38 midstream: tcp 192.168.115.8:50464 -> 123.125.112.49:80 Flow 68 midstream: tcp 192.168.115.8:50497 -> 123.125.112.49:80 Flow 50 midstream: tcp 192.168.115.8:50482 -> 140.205.243.64:80 +Flow 18 not-detected: udp 192.168.115.8:22793 -> 61.227.170.88:20227 +Flow 20 not-detected: udp 192.168.115.8:22793 -> 121.248.133.93:12757 Flow 95 risky: tcp 192.168.115.8:50771 -> 202.108.14.236:80 Flow 95 midstream: tcp 192.168.115.8:50771 -> 202.108.14.236:80 +Flow 19 not-detected: udp 192.168.115.8:22793 -> 202.112.31.89:29072 Flow 97 risky: tcp 192.168.115.8:50773 -> 202.108.14.221:80 Flow 97 midstream: tcp 192.168.115.8:50773 -> 202.108.14.221:80 Flow 99 risky: tcp 192.168.115.8:50774 -> 202.108.14.219:80 Flow 99 midstream: tcp 192.168.115.8:50774 -> 202.108.14.219:80 +Flow 28 not-detected: udp 192.168.115.8:22793 -> 114.41.144.153:10492 +Flow 14 not-detected: udp 192.168.115.8:22793 -> 61.223.204.67:11102 Flow 71 risky: tcp 192.168.115.8:50498 -> 36.110.220.15:80 Flow 71 midstream: tcp 192.168.115.8:50498 -> 36.110.220.15:80 Flow 61 risky: tcp 192.168.115.8:50492 -> 111.206.13.3:80 @@ -86,6 +107,10 @@ Flow 72 midstream: tcp 192.168.115.8:50499 -> 111.206.22.76:80 Flow 89 midstream: tcp 192.168.115.8:50509 -> 106.38.219.107:80 Flow 96 midstream: tcp 192.168.115.8:50772 -> 123.125.111.70:80 Flow 98 midstream: tcp 192.168.115.8:50775 -> 123.125.111.70:80 +Flow 8 not-detected: udp 183.228.182.44:13913 -> 192.168.115.8:22793 +Flow 21 not-detected: udp 192.168.115.8:22793 -> 1.175.128.104:5185 +Flow 31 not-detected: udp 192.168.115.8:22793 -> 210.47.12.20:33738 +Flow 30 not-detected: udp 192.168.115.8:22793 -> 210.47.12.19:33738 Flow 92 risky: tcp 192.168.115.8:50765 -> 36.110.220.15:80 Flow 92 midstream: tcp 192.168.115.8:50765 -> 36.110.220.15:80 Flow 100 risky: tcp 192.168.115.8:50776 -> 111.206.22.77:80 @@ -94,4 +119,8 @@ Flow 101 risky: tcp 192.168.115.8:50777 -> 111.206.22.77:80 Flow 101 midstream: tcp 192.168.115.8:50777 -> 111.206.22.77:80 Flow 104 risky: tcp 192.168.115.8:50779 -> 111.206.22.77:80 Flow 104 midstream: tcp 192.168.115.8:50779 -> 111.206.22.77:80 +Flow 17 not-detected: udp 192.168.115.8:22793 -> 111.117.101.81:10162 +Flow 1 not-detected: udp 1.173.5.226:22636 -> 192.168.115.8:22793 +Flow 5 not-detected: udp 192.168.115.8:22793 -> 202.198.7.89:16039 Flow 73 midstream: tcp 192.168.115.8:50500 -> 23.41.133.163:80 +Flow 15 not-detected: udp 192.168.115.8:22793 -> 36.237.154.69:4316 diff --git a/test/results/flow-captured/default/reasm_crash_anon.pcapng.out b/test/results/flow-captured/default/reasm_crash_anon.pcapng.out index e69de29bb..2a89264e9 100644 --- a/test/results/flow-captured/default/reasm_crash_anon.pcapng.out +++ b/test/results/flow-captured/default/reasm_crash_anon.pcapng.out @@ -0,0 +1,2 @@ +Flow 1 not-detected: tcp 192.168.145.147:51218 -> 10.209.8.148:21999 +Flow 1 midstream: tcp 192.168.145.147:51218 -> 10.209.8.148:21999 diff --git a/test/results/flow-captured/default/shadowsocks.pcap.out b/test/results/flow-captured/default/shadowsocks.pcap.out index e69de29bb..07190d818 100644 --- a/test/results/flow-captured/default/shadowsocks.pcap.out +++ b/test/results/flow-captured/default/shadowsocks.pcap.out @@ -0,0 +1 @@ +Flow 2 not-detected: tcp 127.0.0.1:44276 -> 127.0.0.1:8388 diff --git a/test/results/flow-captured/default/skype.pcap.out b/test/results/flow-captured/default/skype.pcap.out index 85988d951..7874738d9 100644 --- a/test/results/flow-captured/default/skype.pcap.out +++ b/test/results/flow-captured/default/skype.pcap.out @@ -25,7 +25,66 @@ Flow 263 risky: udp 192.168.1.34:56387 -> 192.168.1.1:53 Flow 264 risky: udp 192.168.1.34:52714 -> 192.168.1.1:53 Flow 262 risky: udp 192.168.1.34:52742 -> 192.168.1.1:53 Flow 268 risky: udp 192.168.1.34:65037 -> 192.168.1.1:53 +Flow 9 not-detected: tcp 192.168.1.34:50026 -> 65.55.223.33:40002 +Flow 50 not-detected: tcp 192.168.1.34:50033 -> 157.55.56.170:40015 +Flow 51 not-detected: tcp 192.168.1.34:50034 -> 157.55.130.140:40033 +Flow 221 not-detected: tcp 192.168.1.34:50098 -> 65.55.223.15:40026 +Flow 101 not-detected: tcp 192.168.1.34:50046 -> 157.55.130.150:40011 +Flow 134 not-detected: tcp 192.168.1.34:50054 -> 157.55.130.153:40005 +Flow 113 not-detected: tcp 192.168.1.34:50049 -> 157.55.130.166:40021 +Flow 87 not-detected: tcp 192.168.1.34:50044 -> 157.55.130.167:40031 +Flow 194 not-detected: tcp 192.168.1.34:50074 -> 157.55.130.173:40003 +Flow 133 not-detected: tcp 192.168.1.34:50053 -> 157.55.56.146:40030 +Flow 177 not-detected: tcp 192.168.1.34:50070 -> 157.55.130.170:40018 +Flow 196 not-detected: tcp 192.168.1.34:50076 -> 157.55.235.156:40014 +Flow 168 not-detected: tcp 192.168.1.34:50067 -> 157.55.56.160:40027 +Flow 200 not-detected: tcp 192.168.1.34:50077 -> 157.55.130.176:40022 +Flow 217 not-detected: tcp 192.168.1.34:50092 -> 157.55.130.155:40020 +Flow 57 not-detected: tcp 192.168.1.34:50035 -> 213.199.179.175:40021 +Flow 220 not-detected: tcp 192.168.1.34:50097 -> 157.55.235.176:40022 +Flow 288 not-detected: tcp 192.168.1.34:50143 -> 78.202.226.115:29059 +Flow 289 not-detected: tcp 192.168.1.34:50144 -> 78.202.226.115:29059 +Flow 195 not-detected: tcp 192.168.1.34:50075 -> 213.199.179.142:40003 +Flow 49 not-detected: tcp 192.168.1.34:50032 -> 157.56.52.44:40032 +Flow 227 not-detected: tcp 192.168.1.34:50108 -> 157.56.52.28:40009 +Flow 266 not-detected: tcp 192.168.1.34:50130 -> 212.161.8.36:13392 Flow 269 risky: tcp 192.168.1.34:50131 -> 212.161.8.36:13392 +Flow 243 not-detected: tcp 192.168.1.34:50112 -> 76.167.161.6:20274 +Flow 280 not-detected: tcp 192.168.1.34:50135 -> 76.167.161.6:20274 +Flow 232 not-detected: tcp 192.168.1.34:50109 -> 91.190.216.125:12350 +Flow 233 not-detected: tcp 192.168.1.34:50110 -> 91.190.216.125:12350 +Flow 285 not-detected: tcp 192.168.1.34:50140 -> 76.167.161.6:20274 +Flow 256 not-detected: tcp 192.168.1.34:50125 -> 91.190.218.125:12350 +Flow 257 not-detected: tcp 192.168.1.34:50126 -> 91.190.216.23:12350 +Flow 261 not-detected: tcp 192.168.1.34:50129 -> 91.190.218.125:12350 Flow 23 midstream: tcp 108.160.170.46:443 -> 192.168.1.34:49445 +Flow 244 not-detected: tcp 192.168.1.34:50113 -> 71.238.7.203:18767 +Flow 253 not-detected: tcp 192.168.1.34:50123 -> 80.14.46.121:4415 +Flow 248 not-detected: tcp 192.168.1.34:50117 -> 71.238.7.203:18767 +Flow 258 not-detected: tcp 192.168.1.34:50127 -> 80.14.46.121:4415 +Flow 286 not-detected: tcp 192.168.1.34:50141 -> 80.14.46.121:4415 +Flow 287 not-detected: tcp 192.168.1.34:50142 -> 80.14.46.121:4415 +Flow 281 not-detected: tcp 192.168.1.34:50136 -> 71.238.7.203:18767 +Flow 283 not-detected: tcp 192.168.1.34:50138 -> 71.238.7.203:18767 +Flow 247 not-detected: tcp 192.168.1.34:50116 -> 81.83.77.141:17639 +Flow 246 not-detected: tcp 192.168.1.34:50115 -> 86.31.35.30:59621 +Flow 251 not-detected: tcp 192.168.1.34:50121 -> 81.83.77.141:17639 +Flow 250 not-detected: tcp 192.168.1.34:50119 -> 86.31.35.30:59621 +Flow 222 not-detected: tcp 192.168.1.34:50099 -> 64.4.23.166:40022 +Flow 213 not-detected: tcp 192.168.1.34:50088 -> 157.55.235.146:33033 Flow 255 risky: tcp 17.143.160.22:5223 -> 192.168.1.34:49447 Flow 255 midstream: tcp 17.143.160.22:5223 -> 192.168.1.34:49447 +Flow 277 not-detected: tcp 192.168.1.34:50134 -> 157.56.53.47:12350 +Flow 291 not-detected: tcp 192.168.1.34:50145 -> 157.56.53.51:12350 +Flow 245 not-detected: tcp 192.168.1.34:50114 -> 5.248.186.221:31010 +Flow 249 not-detected: tcp 192.168.1.34:50118 -> 5.248.186.221:31010 +Flow 282 not-detected: tcp 192.168.1.34:50137 -> 5.248.186.221:31010 +Flow 284 not-detected: tcp 192.168.1.34:50139 -> 5.248.186.221:31010 +Flow 144 not-detected: tcp 192.168.1.34:50059 -> 111.221.74.38:40015 +Flow 135 not-detected: tcp 192.168.1.34:50055 -> 111.221.74.47:40030 +Flow 211 not-detected: tcp 192.168.1.34:50086 -> 111.221.77.142:40023 +Flow 219 not-detected: tcp 192.168.1.34:50096 -> 111.221.74.46:40027 +Flow 270 not-detected: tcp 192.168.1.34:50132 -> 149.13.32.15:13392 +Flow 252 not-detected: tcp 192.168.1.34:50122 -> 81.133.19.185:44431 +Flow 254 not-detected: tcp 192.168.1.34:50124 -> 81.133.19.185:44431 +Flow 161 not-detected: tcp 192.168.1.34:50065 -> 65.55.223.12:40031 diff --git a/test/results/flow-captured/default/skype_no_unknown.pcap.out b/test/results/flow-captured/default/skype_no_unknown.pcap.out index b6b1a368f..09c084354 100644 --- a/test/results/flow-captured/default/skype_no_unknown.pcap.out +++ b/test/results/flow-captured/default/skype_no_unknown.pcap.out @@ -18,10 +18,54 @@ Flow 26 risky: udp 192.168.1.34:138 -> 192.168.1.255:138 Flow 27 risky: udp 192.168.1.1:138 -> 192.168.1.34:138 Flow 29 risky: udp 192.168.1.92:138 -> 192.168.1.255:138 Flow 166 risky: udp 192.168.1.34:61095 -> 192.168.1.1:53 +Flow 235 not-detected: tcp 192.168.1.34:51289 -> 71.238.7.203:18767 +Flow 240 not-detected: tcp 192.168.1.34:51292 -> 71.238.7.203:18767 Flow 155 risky: udp 192.168.1.34:63342 -> 192.168.1.1:53 +Flow 258 not-detected: tcp 192.168.1.34:51311 -> 93.79.224.176:14506 +Flow 261 not-detected: tcp 192.168.1.34:51314 -> 93.79.224.176:14506 +Flow 239 not-detected: tcp 192.168.1.34:51291 -> 81.83.77.141:17639 +Flow 242 not-detected: tcp 192.168.1.34:51294 -> 81.83.77.141:17639 +Flow 247 not-detected: tcp 192.168.1.34:51298 -> 82.224.110.241:38895 +Flow 250 not-detected: tcp 192.168.1.34:51301 -> 82.224.110.241:38895 +Flow 121 not-detected: tcp 192.168.1.34:51251 -> 64.4.23.166:40029 +Flow 209 not-detected: tcp 192.168.1.34:51278 -> 64.4.23.159:40009 +Flow 236 not-detected: tcp 192.168.1.34:51290 -> 5.248.186.221:31010 +Flow 241 not-detected: tcp 192.168.1.34:51293 -> 5.248.186.221:31010 +Flow 61 not-detected: tcp 192.168.1.34:51236 -> 111.221.74.45:40008 +Flow 147 not-detected: tcp 192.168.1.34:51256 -> 111.221.77.142:40013 +Flow 109 not-detected: tcp 192.168.1.34:51248 -> 111.221.77.175:40030 +Flow 210 not-detected: tcp 192.168.1.34:51279 -> 111.221.74.48:40008 +Flow 170 not-detected: tcp 192.168.1.34:51267 -> 111.221.74.18:40025 +Flow 253 not-detected: tcp 192.168.1.34:51305 -> 149.13.32.15:13392 Flow 255 risky: tcp 192.168.1.34:51307 -> 149.13.32.15:13392 +Flow 257 not-detected: tcp 192.168.1.34:51309 -> 149.13.32.15:13392 Flow 259 risky: tcp 192.168.1.34:51312 -> 149.13.32.15:13392 +Flow 263 not-detected: tcp 192.168.1.34:51316 -> 149.13.32.15:13392 Flow 167 risky: udp 192.168.1.34:55866 -> 192.168.1.1:53 +Flow 60 not-detected: tcp 192.168.1.34:51235 -> 65.55.223.45:40009 +Flow 59 not-detected: tcp 192.168.1.34:51234 -> 157.55.235.147:40001 Flow 156 risky: udp 192.168.1.34:64258 -> 192.168.1.1:53 +Flow 67 not-detected: tcp 192.168.1.34:51237 -> 157.55.130.176:40022 +Flow 146 not-detected: tcp 192.168.1.34:51255 -> 157.55.130.142:40005 +Flow 148 not-detected: tcp 192.168.1.34:51257 -> 157.55.235.170:40032 +Flow 207 not-detected: tcp 192.168.1.34:51276 -> 157.55.235.146:40021 +Flow 186 not-detected: tcp 192.168.1.34:51272 -> 157.55.235.152:40029 +Flow 208 not-detected: tcp 192.168.1.34:51277 -> 157.55.235.156:40026 +Flow 149 not-detected: tcp 192.168.1.34:51258 -> 213.199.179.176:40021 Flow 199 risky: udp 192.168.1.34:64364 -> 192.168.1.1:53 +Flow 178 not-detected: tcp 192.168.1.34:51269 -> 213.199.179.175:40029 Flow 198 risky: udp 192.168.1.34:60413 -> 192.168.1.1:53 +Flow 10 not-detected: tcp 192.168.1.34:51229 -> 157.56.52.28:40009 +Flow 97 not-detected: tcp 192.168.1.34:51246 -> 157.56.52.44:40020 +Flow 252 not-detected: tcp 192.168.1.34:51303 -> 80.121.84.93:62381 +Flow 254 not-detected: tcp 192.168.1.34:51306 -> 80.121.84.93:62381 +Flow 260 not-detected: tcp 192.168.1.34:51313 -> 212.161.8.36:13392 +Flow 265 not-detected: tcp 192.168.1.34:51318 -> 212.161.8.36:13392 +Flow 267 not-detected: tcp 192.168.1.34:51319 -> 212.161.8.36:13392 +Flow 234 not-detected: tcp 192.168.1.34:51288 -> 76.167.161.6:20274 +Flow 249 not-detected: tcp 192.168.1.34:51300 -> 76.167.161.6:20274 +Flow 227 not-detected: tcp 192.168.1.34:51284 -> 91.190.218.125:12350 +Flow 228 not-detected: tcp 192.168.1.34:51285 -> 91.190.218.125:12350 +Flow 245 not-detected: tcp 192.168.1.34:51296 -> 91.190.216.125:12350 +Flow 246 not-detected: tcp 192.168.1.34:51297 -> 91.190.216.24:12350 +Flow 248 not-detected: tcp 192.168.1.34:51299 -> 91.190.216.125:12350 diff --git a/test/results/flow-captured/default/synscan.pcap.out b/test/results/flow-captured/default/synscan.pcap.out index e69de29bb..50e4fd039 100644 --- a/test/results/flow-captured/default/synscan.pcap.out +++ b/test/results/flow-captured/default/synscan.pcap.out @@ -0,0 +1,1870 @@ +Flow 716 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3390 +Flow 1633 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9535 +Flow 789 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3390 +Flow 1708 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9535 +Flow 378 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5440 +Flow 406 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5440 +Flow 990 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50500 +Flow 381 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19780 +Flow 1057 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50500 +Flow 403 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19780 +Flow 206 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7496 +Flow 250 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7496 +Flow 1073 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3404 +Flow 1124 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3404 +Flow 597 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7512 +Flow 996 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19801 +Flow 658 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7512 +Flow 1051 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19801 +Flow 184 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9575 +Flow 231 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9575 +Flow 423 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9593 +Flow 1044 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9594 +Flow 443 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9593 +Flow 1111 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9594 +Flow 511 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9595 +Flow 560 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9595 +Flow 275 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5500 +Flow 304 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5500 +Flow 455 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15742 +Flow 493 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15742 +Flow 687 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19842 +Flow 760 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19842 +Flow 794 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5510 +Flow 861 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5510 +Flow 55 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1417 +Flow 73 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1417 +Flow 920 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9618 +Flow 977 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9618 +Flow 1317 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:38292 +Flow 351 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3476 +Flow 1380 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:38292 +Flow 392 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3476 +Flow 1651 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13722 +Flow 1288 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44442 +Flow 1362 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44442 +Flow 1720 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13722 +Flow 919 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44443 +Flow 978 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44443 +Flow 1335 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:56737 +Flow 1643 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:56738 +Flow 1410 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:56737 +Flow 1728 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:56738 +Flow 997 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1443 +Flow 1050 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1443 +Flow 336 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3493 +Flow 366 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3493 +Flow 1254 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5544 +Flow 1306 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5544 +Flow 1621 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5550 +Flow 1684 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5550 +Flow 575 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1455 +Flow 645 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1455 +Flow 1790 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5555 +Flow 1867 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5555 +Flow 432 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1461 +Flow 475 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1461 +Flow 868 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5560 +Flow 937 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5560 +Flow 520 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3517 +Flow 795 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5566 +Flow 551 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3517 +Flow 860 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5566 +Flow 1441 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52673 +Flow 1505 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52673 +Flow 264 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9666 +Flow 315 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9666 +Flow 1098 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3527 +Flow 1157 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3527 +Flow 625 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7625 +Flow 712 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7625 +Flow 1539 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7627 +Flow 1799 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50636 +Flow 1614 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7627 +Flow 1858 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50636 +Flow 370 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44501 +Flow 90 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:17877 +Flow 414 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44501 +Flow 1021 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13782 +Flow 119 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:17877 +Flow 1175 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13783 +Flow 1084 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13782 +Flow 1232 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13783 +Flow 688 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3546 +Flow 759 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3546 +Flow 1488 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1500 +Flow 1561 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1500 +Flow 1244 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1501 +Flow 1316 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1501 +Flow 1482 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1503 +Flow 1256 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3551 +Flow 1567 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1503 +Flow 1304 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3551 +Flow 96 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:65000 +Flow 113 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:65000 +Flow 344 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1524 +Flow 399 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1524 +Flow 1039 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3580 +Flow 107 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7676 +Flow 1116 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3580 +Flow 1072 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1533 +Flow 143 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7676 +Flow 1125 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1533 +Flow 356 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5631 +Flow 387 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5631 +Flow 1697 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5633 +Flow 1760 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5633 +Flow 1829 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:42510 +Flow 1902 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:42510 +Flow 1528 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1556 +Flow 1605 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1556 +Flow 1475 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5666 +Flow 1574 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5666 +Flow 580 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20005 +Flow 640 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20005 +Flow 948 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:28201 +Flow 1007 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:28201 +Flow 1784 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1580 +Flow 1873 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1580 +Flow 1839 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5678 +Flow 1922 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5678 +Flow 915 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5679 +Flow 190 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1583 +Flow 982 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5679 +Flow 225 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1583 +Flow 95 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1594 +Flow 114 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1594 +Flow 458 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7741 +Flow 490 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7741 +Flow 540 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20031 +Flow 873 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1600 +Flow 607 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20031 +Flow 932 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1600 +Flow 801 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:17988 +Flow 854 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:17988 +Flow 890 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3659 +Flow 965 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3659 +Flow 1737 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52822 +Flow 804 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5718 +Flow 1817 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52822 +Flow 851 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5718 +Flow 91 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7777 +Flow 913 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7778 +Flow 518 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5730 +Flow 118 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7777 +Flow 984 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7778 +Flow 553 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5730 +Flow 1594 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:26214 +Flow 1656 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:26214 +Flow 1838 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3689 +Flow 565 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:65129 +Flow 186 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1641 +Flow 1923 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3689 +Flow 1093 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3690 +Flow 655 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:65129 +Flow 229 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1641 +Flow 1162 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3690 +Flow 922 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50800 +Flow 134 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52848 +Flow 975 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50800 +Flow 158 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52848 +Flow 1589 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3703 +Flow 888 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:18040 +Flow 1661 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3703 +Flow 382 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7800 +Flow 967 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:18040 +Flow 402 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7800 +Flow 724 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1658 +Flow 781 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1658 +Flow 722 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16000 +Flow 783 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16000 +Flow 354 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16001 +Flow 389 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16001 +Flow 384 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1666 +Flow 400 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1666 +Flow 334 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52869 +Flow 368 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52869 +Flow 1472 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16012 +Flow 1577 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16012 +Flow 698 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16016 +Flow 749 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16016 +Flow 1738 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16018 +Flow 1816 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16018 +Flow 743 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9876 +Flow 1893 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9877 +Flow 812 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9876 +Flow 1959 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9877 +Flow 1023 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9878 +Flow 1082 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9878 +Flow 51 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1687 +Flow 440 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1688 +Flow 77 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1687 +Flow 467 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1688 +Flow 337 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3737 +Flow 365 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3737 +Flow 1296 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1700 +Flow 1354 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1700 +Flow 1374 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5801 +Flow 1445 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5801 +Flow 995 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5802 +Flow 188 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9898 +Flow 1052 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5802 +Flow 227 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9898 +Flow 881 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9900 +Flow 924 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9900 +Flow 172 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14000 +Flow 202 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14000 +Flow 629 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5810 +Flow 708 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5810 +Flow 430 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5811 +Flow 477 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5811 +Flow 1221 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1717 +Flow 953 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:18101 +Flow 1002 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:18101 +Flow 1277 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1717 +Flow 872 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3766 +Flow 721 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1718 +Flow 1469 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5815 +Flow 933 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3766 +Flow 784 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1718 +Flow 1532 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5815 +Flow 719 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1721 +Flow 786 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1721 +Flow 30 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1723 +Flow 69 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1723 +Flow 112 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9917 +Flow 139 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9917 +Flow 129 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5822 +Flow 255 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:11967 +Flow 163 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5822 +Flow 283 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:11967 +Flow 187 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5825 +Flow 228 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5825 +Flow 420 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3784 +Flow 446 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3784 +Flow 94 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16080 +Flow 115 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16080 +Flow 729 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9943 +Flow 776 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9943 +Flow 1251 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3800 +Flow 499 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9944 +Flow 1309 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3800 +Flow 800 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3801 +Flow 532 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9944 +Flow 855 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3801 +Flow 596 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5850 +Flow 1626 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1755 +Flow 659 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5850 +Flow 1715 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1755 +Flow 986 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12000 +Flow 1061 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12000 +Flow 545 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1761 +Flow 358 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3809 +Flow 602 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1761 +Flow 385 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3809 +Flow 1641 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5859 +Flow 1700 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5859 +Flow 1889 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5862 +Flow 291 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3814 +Flow 1963 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5862 +Flow 502 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7911 +Flow 329 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3814 +Flow 529 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7911 +Flow 1847 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7920 +Flow 879 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9968 +Flow 1350 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16113 +Flow 1914 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7920 +Flow 1171 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7921 +Flow 926 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9968 +Flow 1426 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16113 +Flow 1236 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7921 +Flow 125 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3826 +Flow 357 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3827 +Flow 167 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3826 +Flow 1787 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3828 +Flow 386 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3827 +Flow 1870 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3828 +Flow 1027 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5877 +Flow 1104 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1782 +Flow 1078 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5877 +Flow 1151 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1782 +Flow 1014 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1783 +Flow 1091 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1783 +Flow 1674 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20221 +Flow 1753 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20221 +Flow 342 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20222 +Flow 360 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20222 +Flow 848 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7937 +Flow 1197 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7938 +Flow 899 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7937 +Flow 1259 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7938 +Flow 1841 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1801 +Flow 1920 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1801 +Flow 885 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:34571 +Flow 614 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3851 +Flow 970 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:34571 +Flow 590 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:34572 +Flow 683 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3851 +Flow 1046 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:34573 +Flow 665 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:34572 +Flow 453 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1805 +Flow 1691 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9998 +Flow 1109 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:34573 +Flow 1022 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5902 +Flow 495 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1805 +Flow 1766 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9998 +Flow 1534 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55055 +Flow 1083 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5902 +Flow 103 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5903 +Flow 1791 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55056 +Flow 1619 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55055 +Flow 1653 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5904 +Flow 147 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5903 +Flow 1866 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55056 +Flow 1718 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5904 +Flow 577 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10001 +Flow 643 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10001 +Flow 535 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5906 +Flow 272 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10002 +Flow 733 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10003 +Flow 1029 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5907 +Flow 612 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5906 +Flow 307 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10002 +Flow 822 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10003 +Flow 1076 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5907 +Flow 626 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10004 +Flow 711 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10004 +Flow 1298 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5910 +Flow 1774 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5911 +Flow 1352 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5910 +Flow 1835 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5911 +Flow 421 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10009 +Flow 803 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10010 +Flow 445 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10009 +Flow 1803 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5915 +Flow 852 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10010 +Flow 1925 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10012 +Flow 1854 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5915 +Flow 1969 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10012 +Flow 1348 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3869 +Flow 1397 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3869 +Flow 1372 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3871 +Flow 1447 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3871 +Flow 769 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5922 +Flow 828 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5922 +Flow 1805 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5925 +Flow 1852 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5925 +Flow 798 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3878 +Flow 857 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3878 +Flow 1216 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10024 +Flow 89 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3880 +Flow 1536 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10025 +Flow 1282 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10024 +Flow 120 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3880 +Flow 1617 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10025 +Flow 728 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1839 +Flow 777 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1839 +Flow 269 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1840 +Flow 1430 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3889 +Flow 310 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1840 +Flow 1516 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3889 +Flow 1522 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5950 +Flow 1601 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5950 +Flow 1388 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7999 +Flow 1461 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7999 +Flow 1292 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5952 +Flow 427 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8000 +Flow 1358 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5952 +Flow 1344 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8001 +Flow 624 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3905 +Flow 480 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8000 +Flow 1401 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8001 +Flow 713 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3905 +Flow 633 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8002 +Flow 704 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8002 +Flow 500 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1862 +Flow 1176 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8007 +Flow 1936 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1863 +Flow 531 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1862 +Flow 169 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5959 +Flow 1231 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8007 +Flow 1986 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1863 +Flow 1142 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5960 +Flow 865 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1864 +Flow 205 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5959 +Flow 1336 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5961 +Flow 1205 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5960 +Flow 940 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1864 +Flow 1947 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5962 +Flow 1743 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3914 +Flow 1409 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5961 +Flow 1975 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5962 +Flow 1478 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8011 +Flow 1811 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3914 +Flow 343 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5963 +Flow 1571 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8011 +Flow 359 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5963 +Flow 300 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3918 +Flow 320 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3918 +Flow 1652 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3920 +Flow 1719 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3920 +Flow 717 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1875 +Flow 788 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1875 +Flow 519 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8021 +Flow 1789 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8022 +Flow 552 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8021 +Flow 1868 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8022 +Flow 1383 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8031 +Flow 1466 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8031 +Flow 513 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10082 +Flow 1776 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:63331 +Flow 942 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5987 +Flow 558 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10082 +Flow 1881 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:63331 +Flow 1013 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5987 +Flow 570 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5988 +Flow 897 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5989 +Flow 650 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5988 +Flow 958 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5989 +Flow 256 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3945 +Flow 839 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8042 +Flow 282 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3945 +Flow 908 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8042 +Flow 992 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1900 +Flow 1744 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:65389 +Flow 1055 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1900 +Flow 258 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8045 +Flow 1810 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:65389 +Flow 1064 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5998 +Flow 280 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8045 +Flow 1133 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5998 +Flow 628 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5999 +Flow 709 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5999 +Flow 50 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6000 +Flow 1481 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6001 +Flow 78 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6000 +Flow 1568 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6001 +Flow 1392 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6002 +Flow 1457 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6002 +Flow 1217 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6003 +Flow 1741 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6004 +Flow 1281 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6003 +Flow 1944 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6005 +Flow 1813 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6004 +Flow 1978 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6005 +Flow 1695 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6006 +Flow 1762 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6006 +Flow 1190 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6007 +Flow 1266 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6007 +Flow 1347 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6009 +Flow 1398 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6009 +Flow 847 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1914 +Flow 900 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1914 +Flow 292 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:24444 +Flow 328 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:24444 +Flow 955 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3971 +Flow 1000 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3971 +Flow 517 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6025 +Flow 554 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6025 +Flow 875 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12174 +Flow 930 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12174 +Flow 1442 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8081 +Flow 1504 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8081 +Flow 1518 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3986 +Flow 736 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8082 +Flow 1648 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8083 +Flow 1580 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3986 +Flow 819 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8082 +Flow 1896 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8084 +Flow 1723 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8083 +Flow 1956 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8084 +Flow 1147 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8085 +Flow 1200 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8085 +Flow 346 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8086 +Flow 1043 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8087 +Flow 397 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8086 +Flow 1218 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8088 +Flow 1112 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8087 +Flow 1280 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8088 +Flow 1094 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8089 +Flow 1161 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8089 +Flow 846 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8090 +Flow 901 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8090 +Flow 1474 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1947 +Flow 691 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3995 +Flow 1575 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1947 +Flow 756 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3995 +Flow 1890 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8093 +Flow 1962 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8093 +Flow 1692 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3998 +Flow 87 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14238 +Flow 1371 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:51103 +Flow 1765 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3998 +Flow 122 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14238 +Flow 1448 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:51103 +Flow 182 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4000 +Flow 1842 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4001 +Flow 233 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4000 +Flow 1919 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4001 +Flow 1484 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4002 +Flow 1565 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4002 +Flow 634 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8099 +Flow 105 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4003 +Flow 703 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8099 +Flow 501 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8100 +Flow 1290 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4004 +Flow 145 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4003 +Flow 1360 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4004 +Flow 530 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8100 +Flow 374 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4005 +Flow 410 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4005 +Flow 335 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4006 +Flow 367 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4006 +Flow 1781 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6059 +Flow 1876 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6059 +Flow 1164 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1971 +Flow 1250 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1972 +Flow 1243 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1971 +Flow 1310 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1972 +Flow 880 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1974 +Flow 925 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1974 +Flow 1892 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1984 +Flow 1960 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1984 +Flow 615 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10180 +Flow 682 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10180 +Flow 1645 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4045 +Flow 1726 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4045 +Flow 1322 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:57294 +Flow 1319 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1998 +Flow 1423 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:57294 +Flow 1378 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1998 +Flow 764 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1999 +Flow 263 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:40911 +Flow 833 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1999 +Flow 316 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:40911 +Flow 355 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2001 +Flow 1496 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2002 +Flow 388 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2001 +Flow 1553 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2002 +Flow 1185 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2003 +Flow 1381 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6100 +Flow 1271 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2003 +Flow 893 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2004 +Flow 1468 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6100 +Flow 1035 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6101 +Flow 962 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2004 +Flow 101 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2005 +Flow 1120 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6101 +Flow 1693 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2006 +Flow 149 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2005 +Flow 1764 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2006 +Flow 1432 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2007 +Flow 1822 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2008 +Flow 1514 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2007 +Flow 1884 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2008 +Flow 951 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2009 +Flow 1677 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2010 +Flow 1004 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2009 +Flow 582 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6106 +Flow 1750 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2010 +Flow 673 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6106 +Flow 515 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2013 +Flow 556 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2013 +Flow 1172 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6112 +Flow 1235 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6112 +Flow 340 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2020 +Flow 1376 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2021 +Flow 362 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2020 +Flow 1453 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2021 +Flow 741 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2022 +Flow 1540 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10215 +Flow 814 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2022 +Flow 1613 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10215 +Flow 766 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12265 +Flow 831 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12265 +Flow 1786 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6123 +Flow 1871 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6123 +Flow 53 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2030 +Flow 75 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2030 +Flow 1888 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2033 +Flow 1735 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6129 +Flow 1964 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2033 +Flow 1945 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2034 +Flow 1819 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6129 +Flow 1977 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2034 +Flow 1031 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2035 +Flow 1074 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2035 +Flow 916 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8180 +Flow 981 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8180 +Flow 746 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8181 +Flow 809 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8181 +Flow 86 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2038 +Flow 123 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2038 +Flow 1785 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2040 +Flow 1872 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2040 +Flow 1258 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2041 +Flow 1302 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2041 +Flow 1140 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2042 +Flow 1545 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2043 +Flow 1207 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2042 +Flow 1608 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2043 +Flow 1779 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2045 +Flow 1878 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2045 +Flow 350 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2046 +Flow 208 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30718 +Flow 587 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2047 +Flow 393 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2046 +Flow 248 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30718 +Flow 1935 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49152 +Flow 696 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8192 +Flow 668 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2047 +Flow 637 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2048 +Flow 185 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32768 +Flow 1987 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49152 +Flow 1343 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49153 +Flow 1225 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32769 +Flow 751 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8192 +Flow 944 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1 +Flow 700 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2048 +Flow 542 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8193 +Flow 230 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32768 +Flow 1402 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49153 +Flow 1775 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32770 +Flow 1300 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32769 +Flow 802 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49154 +Flow 1193 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8194 +Flow 1011 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1 +Flow 605 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8193 +Flow 853 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49154 +Flow 1834 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32770 +Flow 1887 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10243 +Flow 1480 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32771 +Flow 1263 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8194 +Flow 544 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3 +Flow 194 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49155 +Flow 1569 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32771 +Flow 1965 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10243 +Flow 1332 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32772 +Flow 793 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49156 +Flow 841 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4 +Flow 603 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3 +Flow 221 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49155 +Flow 1951 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49157 +Flow 1413 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32772 +Flow 1177 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32773 +Flow 906 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4 +Flow 862 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49156 +Flow 1971 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49157 +Flow 1230 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32773 +Flow 954 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49158 +Flow 585 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32774 +Flow 54 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6 +Flow 1627 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49159 +Flow 1001 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49158 +Flow 1843 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32775 +Flow 670 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32774 +Flow 514 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7 +Flow 74 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6 +Flow 1918 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32775 +Flow 1848 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49160 +Flow 1714 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49159 +Flow 588 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8200 +Flow 557 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7 +Flow 509 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32776 +Flow 1913 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49160 +Flow 1489 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49161 +Flow 1642 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32777 +Flow 667 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8200 +Flow 562 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32776 +Flow 371 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9 +Flow 1729 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32777 +Flow 1560 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49161 +Flow 413 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9 +Flow 93 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32778 +Flow 767 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49163 +Flow 792 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32779 +Flow 116 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32778 +Flow 863 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32779 +Flow 830 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49163 +Flow 1174 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6156 +Flow 503 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32780 +Flow 727 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49165 +Flow 528 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32780 +Flow 1373 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13 +Flow 1233 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6156 +Flow 276 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32781 +Flow 778 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49165 +Flow 1446 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13 +Flow 770 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32782 +Flow 303 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32781 +Flow 1739 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49167 +Flow 998 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32783 +Flow 827 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32782 +Flow 380 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4111 +Flow 1815 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49167 +Flow 1527 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32784 +Flow 1049 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32783 +Flow 404 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4111 +Flow 1596 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32784 +Flow 1833 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2065 +Flow 436 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32785 +Flow 289 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:17 +Flow 1908 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2065 +Flow 471 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32785 +Flow 331 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:17 +Flow 1139 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19 +Flow 1647 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2068 +Flow 1208 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19 +Flow 1724 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2068 +Flow 1443 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49175 +Flow 1503 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49175 +Flow 426 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49176 +Flow 135 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:24 +Flow 481 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49176 +Flow 157 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:24 +Flow 293 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:26 +Flow 327 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:26 +Flow 765 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4125 +Flow 832 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4125 +Flow 463 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4126 +Flow 429 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30 +Flow 56 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8222 +Flow 485 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4126 +Flow 478 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30 +Flow 72 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8222 +Flow 132 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32 +Flow 353 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4129 +Flow 1640 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:33 +Flow 160 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32 +Flow 1701 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:33 +Flow 390 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4129 +Flow 1368 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:37 +Flow 1451 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:37 +Flow 694 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:42 +Flow 753 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:42 +Flow 1017 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:45100 +Flow 1088 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:45100 +Flow 1485 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49 +Flow 1564 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49 +Flow 217 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2099 +Flow 844 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2100 +Flow 239 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2099 +Flow 903 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2100 +Flow 1931 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2103 +Flow 1991 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2103 +Flow 1636 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2105 +Flow 878 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12345 +Flow 1705 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2105 +Flow 927 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12345 +Flow 176 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2106 +Flow 730 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2107 +Flow 198 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2106 +Flow 775 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2107 +Flow 1628 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8254 +Flow 1713 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8254 +Flow 1486 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2111 +Flow 1563 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2111 +Flow 1184 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:70 +Flow 1148 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2119 +Flow 1199 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2119 +Flow 595 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2121 +Flow 660 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2121 +Flow 572 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2126 +Flow 1196 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:79 +Flow 648 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2126 +Flow 1260 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:79 +Flow 1365 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:81 +Flow 1429 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:81 +Flow 466 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:82 +Flow 619 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:83 +Flow 482 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:82 +Flow 799 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:84 +Flow 678 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:83 +Flow 1824 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:85 +Flow 856 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:84 +Flow 1907 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:85 +Flow 1369 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2135 +Flow 1450 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2135 +Flow 1040 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:89 +Flow 1895 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:90 +Flow 1115 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:89 +Flow 1957 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:90 +Flow 177 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:61532 +Flow 197 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:61532 +Flow 1143 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2144 +Flow 1204 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2144 +Flow 1544 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8290 +Flow 1609 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8290 +Flow 377 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:99 +Flow 124 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8291 +Flow 578 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8292 +Flow 1588 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:100 +Flow 407 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:99 +Flow 168 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8291 +Flow 1662 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:100 +Flow 642 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8292 +Flow 918 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14441 +Flow 979 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14441 +Flow 1248 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:106 +Flow 108 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14442 +Flow 1312 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:106 +Flow 142 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14442 +Flow 254 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8300 +Flow 763 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:109 +Flow 284 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8300 +Flow 834 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:109 +Flow 5 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:111 +Flow 1792 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2160 +Flow 25 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:111 +Flow 1865 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2160 +Flow 465 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2161 +Flow 12 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:113 +Flow 483 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2161 +Flow 1593 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:119 +Flow 1657 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:119 +Flow 1034 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2170 +Flow 1121 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2170 +Flow 523 not-detected: tcp 172.16.0.8:36061 -> 64.13.134.52:113 +Flow 723 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:125 +Flow 782 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:125 +Flow 425 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4224 +Flow 441 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4224 +Flow 1286 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2179 +Flow 1364 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2179 +Flow 1327 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2191 +Flow 1418 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2191 +Flow 1032 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:144 +Flow 1123 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:144 +Flow 1384 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:146 +Flow 1346 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4242 +Flow 1465 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:146 +Flow 1399 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4242 +Flow 594 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2196 +Flow 661 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2196 +Flow 506 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2200 +Flow 525 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2200 +Flow 1634 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:161 +Flow 1707 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:161 +Flow 504 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:163 +Flow 527 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:163 +Flow 49 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2222 +Flow 79 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2222 +Flow 917 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4279 +Flow 980 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4279 +Flow 1669 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8383 +Flow 1733 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8383 +Flow 4 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:199 +Flow 26 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:199 +Flow 461 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6346 +Flow 1851 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2251 +Flow 487 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6346 +Flow 1910 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2251 +Flow 435 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8400 +Flow 472 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8400 +Flow 1096 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8402 +Flow 1159 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8402 +Flow 1030 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:211 +Flow 1075 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:211 +Flow 564 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:212 +Flow 431 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2260 +Flow 656 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:212 +Flow 476 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2260 +Flow 1192 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:222 +Flow 1264 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:222 +Flow 1387 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:24800 +Flow 1699 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4321 +Flow 1462 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:24800 +Flow 1758 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4321 +Flow 1678 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30951 +Flow 1749 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30951 +Flow 536 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2288 +Flow 611 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2288 +Flow 266 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6389 +Flow 313 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6389 +Flow 1524 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49400 +Flow 1599 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49400 +Flow 1519 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8443 +Flow 1579 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8443 +Flow 921 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2301 +Flow 976 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2301 +Flow 419 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:254 +Flow 1101 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:255 +Flow 447 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:254 +Flow 1154 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:255 +Flow 37 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:256 +Flow 63 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:256 +Flow 1886 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:259 +Flow 871 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55555 +Flow 1966 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:259 +Flow 934 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55555 +Flow 1487 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:264 +Flow 1562 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:264 +Flow 1543 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2323 +Flow 1610 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2323 +Flow 270 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:280 +Flow 309 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:280 +Flow 695 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:51493 +Flow 752 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:51493 +Flow 747 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:301 +Flow 808 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:301 +Flow 579 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55600 +Flow 641 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55600 +Flow 1939 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:306 +Flow 1983 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:306 +Flow 1470 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8500 +Flow 1531 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8500 +Flow 1898 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:311 +Flow 1954 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:311 +Flow 1795 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2366 +Flow 985 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:31038 +Flow 1862 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2366 +Flow 1062 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:31038 +Flow 546 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10566 +Flow 601 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10566 +Flow 1016 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2381 +Flow 1089 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2381 +Flow 295 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2382 +Flow 740 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2383 +Flow 325 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2382 +Flow 815 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2383 +Flow 1497 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:340 +Flow 1552 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:340 +Flow 417 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2393 +Flow 1291 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2394 +Flow 449 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2393 +Flow 1359 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2394 +Flow 991 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4443 +Flow 1595 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20828 +Flow 1195 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4444 +Flow 1056 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4443 +Flow 1655 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20828 +Flow 1261 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4444 +Flow 1015 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4445 +Flow 1145 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4446 +Flow 1090 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4445 +Flow 1202 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4446 +Flow 1038 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2399 +Flow 1117 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2399 +Flow 1937 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2401 +Flow 617 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4449 +Flow 1985 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2401 +Flow 680 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4449 +Flow 1745 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6502 +Flow 1809 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6502 +Flow 742 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6510 +Flow 726 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:366 +Flow 813 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6510 +Flow 779 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:366 +Flow 1253 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27000 +Flow 987 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10616 +Flow 1307 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27000 +Flow 1060 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10616 +Flow 731 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10617 +Flow 774 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10617 +Flow 46 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10621 +Flow 82 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10621 +Flow 131 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10626 +Flow 161 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10626 +Flow 1194 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10628 +Flow 1262 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10628 +Flow 44 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10629 +Flow 84 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10629 +Flow 210 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6543 +Flow 246 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6543 +Flow 638 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6547 +Flow 699 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6547 +Flow 1105 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:406 +Flow 1385 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:407 +Flow 1150 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:406 +Flow 1464 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:407 +Flow 1168 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8600 +Flow 1239 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8600 +Flow 1106 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:22939 +Flow 1149 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:22939 +Flow 1318 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:416 +Flow 1479 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:417 +Flow 1379 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:416 +Flow 1570 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:417 +Flow 1431 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6565 +Flow 1515 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6565 +Flow 1334 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6566 +Flow 1492 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6567 +Flow 1411 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6566 +Flow 1557 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6567 +Flow 170 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:425 +Flow 204 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:425 +Flow 191 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6580 +Flow 224 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6580 +Flow 1435 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2492 +Flow 1672 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:444 +Flow 1755 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:444 +Flow 1511 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2492 +Flow 1491 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2500 +Flow 1558 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2500 +Flow 462 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:57797 +Flow 898 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4550 +Flow 486 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:57797 +Flow 957 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4550 +Flow 216 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8649 +Flow 1294 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:458 +Flow 240 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8649 +Flow 1356 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:458 +Flow 452 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8651 +Flow 1390 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:61900 +Flow 1100 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8652 +Flow 496 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8651 +Flow 1459 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:61900 +Flow 1155 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8652 +Flow 1793 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8654 +Flow 1864 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8654 +Flow 516 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:464 +Flow 555 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:464 +Flow 541 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4567 +Flow 606 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4567 +Flow 349 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2522 +Flow 394 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2522 +Flow 267 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2525 +Flow 312 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2525 +Flow 837 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:481 +Flow 910 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:481 +Flow 178 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:497 +Flow 196 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:497 +Flow 1826 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6646 +Flow 1905 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6646 +Flow 1367 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2557 +Flow 715 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8701 +Flow 1427 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2557 +Flow 790 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8701 +Flow 1950 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:512 +Flow 1972 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:512 +Flow 1341 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:513 +Flow 1404 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:513 +Flow 1623 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:515 +Flow 1682 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:515 +Flow 1899 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6666 +Flow 1953 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6666 +Flow 1675 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6667 +Flow 1752 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6667 +Flow 1167 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6668 +Flow 1135 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:524 +Flow 1240 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6668 +Flow 1212 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:524 +Flow 180 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6669 +Flow 235 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6669 +Flow 720 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10778 +Flow 785 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10778 +Flow 1323 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:541 +Flow 1422 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:541 +Flow 1187 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:543 +Flow 1670 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:544 +Flow 1269 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:543 +Flow 1732 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:544 +Flow 956 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6689 +Flow 892 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:545 +Flow 999 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6689 +Flow 963 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:545 +Flow 1541 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6692 +Flow 1612 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6692 +Flow 1219 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:41511 +Flow 1279 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:41511 +Flow 895 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2601 +Flow 1245 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2602 +Flow 960 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2601 +Flow 1315 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2602 +Flow 290 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6699 +Flow 1624 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:555 +Flow 1638 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:18988 +Flow 1717 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:555 +Flow 330 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6699 +Flow 1703 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:18988 +Flow 1840 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2607 +Flow 1921 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2607 +Flow 1293 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2608 +Flow 1357 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2608 +Flow 1894 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:563 +Flow 1958 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:563 +Flow 459 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4662 +Flow 489 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4662 +Flow 1102 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:33354 +Flow 1153 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:33354 +Flow 1622 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2638 +Flow 1683 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2638 +Flow 1391 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:593 +Flow 1458 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:593 +Flow 1933 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8800 +Flow 1019 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16992 +Flow 1989 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8800 +Flow 1746 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16993 +Flow 1086 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16992 +Flow 1808 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16993 +Flow 1537 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:616 +Flow 1616 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:616 +Flow 773 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:617 +Flow 109 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:31337 +Flow 824 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:617 +Flow 1832 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:625 +Flow 1909 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:625 +Flow 1927 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:60020 +Flow 1967 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:60020 +Flow 1494 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:631 +Flow 1555 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:631 +Flow 627 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6779 +Flow 1583 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:636 +Flow 710 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6779 +Flow 1667 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:636 +Flow 299 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:62078 +Flow 321 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:62078 +Flow 259 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6788 +Flow 1740 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6789 +Flow 279 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6788 +Flow 1814 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6789 +Flow 497 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:646 +Flow 534 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:646 +Flow 1499 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6792 +Flow 1495 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:648 +Flow 1554 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:648 +Flow 1550 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6792 +Flow 99 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2701 +Flow 1048 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2702 +Flow 151 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2701 +Flow 1107 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2702 +Flow 1436 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2710 +Flow 1510 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2710 +Flow 1138 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15000 +Flow 1209 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15000 +Flow 877 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15002 +Flow 296 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:666 +Flow 1183 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15003 +Flow 928 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15002 +Flow 1024 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:667 +Flow 324 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:666 +Flow 1272 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15003 +Flow 1639 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:668 +Flow 1081 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:667 +Flow 133 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15004 +Flow 302 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19101 +Flow 1702 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:668 +Flow 732 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2717 +Flow 159 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15004 +Flow 1942 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2718 +Flow 823 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2717 +Flow 318 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19101 +Flow 1980 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2718 +Flow 1897 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2725 +Flow 1955 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2725 +Flow 1041 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8873 +Flow 1114 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8873 +Flow 57 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:683 +Flow 512 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:35500 +Flow 71 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:683 +Flow 559 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:35500 +Flow 1846 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:687 +Flow 1915 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:687 +Flow 1297 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:691 +Flow 1353 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:691 +Flow 262 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6839 +Flow 317 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6839 +Flow 41 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8888 +Flow 60 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8888 +Flow 274 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:700 +Flow 305 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:700 +Flow 950 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:705 +Flow 1005 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:705 +Flow 1214 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8899 +Flow 1284 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8899 +Flow 1224 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:711 +Flow 1301 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:711 +Flow 1170 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:714 +Flow 1237 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:714 +Flow 1382 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:720 +Flow 1467 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:720 +Flow 1342 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:722 +Flow 1403 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:722 +Flow 457 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:726 +Flow 491 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:726 +Flow 1439 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27352 +Flow 1801 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27353 +Flow 1507 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27352 +Flow 1856 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27353 +Flow 189 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27355 +Flow 379 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27356 +Flow 226 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27355 +Flow 405 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27356 +Flow 1337 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:58080 +Flow 1408 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:58080 +Flow 884 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6881 +Flow 971 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6881 +Flow 631 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:749 +Flow 706 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:749 +Flow 460 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2800 +Flow 92 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4848 +Flow 488 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2800 +Flow 117 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4848 +Flow 1685 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6901 +Flow 1772 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6901 +Flow 1370 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2809 +Flow 1449 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2809 +Flow 352 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2811 +Flow 391 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2811 +Flow 218 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:765 +Flow 238 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:765 +Flow 1649 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:777 +Flow 1722 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:777 +Flow 1500 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:783 +Flow 1549 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:783 +Flow 1654 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:787 +Flow 1730 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:787 +Flow 1502 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:54045 +Flow 1578 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:54045 +Flow 1036 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:800 +Flow 1119 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:800 +Flow 301 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:801 +Flow 1037 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8994 +Flow 319 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:801 +Flow 1118 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8994 +Flow 333 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4899 +Flow 692 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4900 +Flow 369 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4899 +Flow 755 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4900 +Flow 1635 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9000 +Flow 209 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:808 +Flow 1706 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9000 +Flow 1182 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9001 +Flow 247 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:808 +Flow 1273 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9001 +Flow 1063 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9002 +Flow 1134 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9002 +Flow 592 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9003 +Flow 663 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9003 +Flow 567 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9009 +Flow 653 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9009 +Flow 219 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9010 +Flow 1783 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9011 +Flow 237 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9010 +Flow 1874 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9011 +Flow 179 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2869 +Flow 195 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2869 +Flow 1687 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6969 +Flow 1770 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6969 +Flow 1526 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2875 +Flow 1597 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2875 +Flow 100 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:843 +Flow 150 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:843 +Flow 253 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49999 +Flow 1734 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50000 +Flow 1477 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9040 +Flow 285 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49999 +Flow 1820 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50000 +Flow 1572 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9040 +Flow 1068 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50001 +Flow 1690 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50002 +Flow 1129 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50001 +Flow 1767 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50002 +Flow 1632 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50003 +Flow 1340 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19283 +Flow 1709 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50003 +Flow 1405 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19283 +Flow 1794 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50006 +Flow 1863 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50006 +Flow 268 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7000 +Flow 616 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7001 +Flow 311 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7000 +Flow 947 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7002 +Flow 681 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7001 +Flow 623 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9050 +Flow 1008 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7002 +Flow 674 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9050 +Flow 1440 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7004 +Flow 1506 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7004 +Flow 416 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2909 +Flow 1680 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2910 +Flow 450 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2909 +Flow 1802 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7007 +Flow 1757 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2910 +Flow 1855 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7007 +Flow 876 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:11110 +Flow 929 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:11110 +Flow 498 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:11111 +Flow 1837 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2920 +Flow 533 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:11111 +Flow 1924 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2920 +Flow 1018 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7019 +Flow 1087 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7019 +Flow 220 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9071 +Flow 1625 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:880 +Flow 236 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9071 +Flow 1716 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:880 +Flow 1255 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7025 +Flow 1305 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7025 +Flow 686 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19315 +Flow 761 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19315 +Flow 1025 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9080 +Flow 589 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:888 +Flow 1080 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9080 +Flow 994 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9081 +Flow 666 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:888 +Flow 1053 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9081 +Flow 1097 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9090 +Flow 883 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:898 +Flow 1158 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9090 +Flow 972 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:898 +Flow 574 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9091 +Flow 1591 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:900 +Flow 646 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9091 +Flow 1659 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:900 +Flow 866 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:901 +Flow 1928 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4998 +Flow 1092 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:902 +Flow 939 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:901 +Flow 1994 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4998 +Flow 1163 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:902 +Flow 1169 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5000 +Flow 1238 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5000 +Flow 1929 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5002 +Flow 1993 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5002 +Flow 1798 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5003 +Flow 1644 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9099 +Flow 1727 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9099 +Flow 1859 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5003 +Flow 1523 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9100 +Flow 1437 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5004 +Flow 1600 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9100 +Flow 1509 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5004 +Flow 630 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9101 +Flow 707 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9101 +Flow 138 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9102 +Flow 1780 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:911 +Flow 1299 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9103 +Flow 154 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9102 +Flow 1877 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:911 +Flow 1351 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9103 +Flow 456 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:912 +Flow 1542 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5009 +Flow 492 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:912 +Flow 1611 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5009 +Flow 1389 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19350 +Flow 437 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9110 +Flow 1460 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19350 +Flow 1671 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9111 +Flow 840 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2967 +Flow 470 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9110 +Flow 1731 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9111 +Flow 907 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2967 +Flow 415 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2968 +Flow 451 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2968 +Flow 507 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7070 +Flow 524 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7070 +Flow 1047 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5030 +Flow 1108 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5030 +Flow 212 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5033 +Flow 244 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5033 +Flow 586 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2998 +Flow 669 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2998 +Flow 433 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3000 +Flow 474 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3000 +Flow 192 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3001 +Flow 1179 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5050 +Flow 223 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3001 +Flow 1228 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5050 +Flow 1688 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3003 +Flow 739 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5051 +Flow 1769 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3003 +Flow 816 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5051 +Flow 613 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7100 +Flow 1696 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3005 +Flow 684 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7100 +Flow 1761 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3005 +Flow 1584 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5054 +Flow 806 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3006 +Flow 1676 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7103 +Flow 1666 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5054 +Flow 869 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3007 +Flow 849 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3006 +Flow 1751 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7103 +Flow 936 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3007 +Flow 1042 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7106 +Flow 1689 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3011 +Flow 1113 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7106 +Flow 1768 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3011 +Flow 1849 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3013 +Flow 1912 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3013 +Flow 273 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3017 +Flow 306 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3017 +Flow 1796 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:23502 +Flow 1861 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:23502 +Flow 341 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:48080 +Flow 361 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:48080 +Flow 867 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:981 +Flow 938 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:981 +Flow 635 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3030 +Flow 1938 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3031 +Flow 702 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3030 +Flow 1984 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3031 +Flow 339 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5080 +Flow 363 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5080 +Flow 914 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:987 +Flow 983 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:987 +Flow 47 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:990 +Flow 1287 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5087 +Flow 81 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:990 +Flow 1363 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5087 +Flow 1099 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:992 +Flow 1156 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:992 +Flow 522 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:999 +Flow 1434 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1000 +Flow 549 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:999 +Flow 1512 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1000 +Flow 845 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1001 +Flow 902 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1001 +Flow 894 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1002 +Flow 58 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3050 +Flow 961 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1002 +Flow 70 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3050 +Flow 1136 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5100 +Flow 298 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3052 +Flow 1211 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5100 +Flow 322 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3052 +Flow 136 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5101 +Flow 1026 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5102 +Flow 156 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5101 +Flow 1827 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1007 +Flow 1079 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5102 +Flow 1904 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1007 +Flow 102 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9200 +Flow 576 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1009 +Flow 148 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9200 +Flow 1095 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1010 +Flow 644 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1009 +Flow 1160 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1010 +Flow 1070 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1011 +Flow 1127 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1011 +Flow 1338 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9207 +Flow 1407 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9207 +Flow 1926 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1021 +Flow 1968 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1021 +Flow 1529 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1022 +Flow 1604 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1022 +Flow 1586 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1023 +Flow 211 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3071 +Flow 887 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5120 +Flow 1664 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1023 +Flow 245 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3071 +Flow 130 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1024 +Flow 968 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5120 +Flow 162 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1024 +Flow 6 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1025 +Flow 1471 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1026 +Flow 24 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1025 +Flow 1530 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1026 +Flow 428 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1027 +Flow 548 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9220 +Flow 1590 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1028 +Flow 479 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1027 +Flow 599 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9220 +Flow 1660 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1028 +Flow 864 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1029 +Flow 126 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3077 +Flow 1186 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1030 +Flow 941 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1029 +Flow 166 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3077 +Flow 1270 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1030 +Flow 636 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1031 +Flow 1198 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1032 +Flow 701 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1031 +Flow 1493 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1033 +Flow 1274 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1032 +Flow 1556 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1033 +Flow 1546 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1034 +Flow 1607 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1034 +Flow 1329 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1035 +Flow 1416 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1035 +Flow 581 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1036 +Flow 1028 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1037 +Flow 639 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1036 +Flow 1821 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1038 +Flow 1077 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1037 +Flow 1885 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1038 +Flow 1538 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1039 +Flow 1615 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1039 +Flow 376 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1040 +Flow 734 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1041 +Flow 408 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1040 +Flow 821 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1041 +Flow 735 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1042 +Flow 820 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1042 +Flow 183 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1043 +Flow 1949 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1044 +Flow 232 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1043 +Flow 1973 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1044 +Flow 1247 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1045 +Flow 1313 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1045 +Flow 945 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1046 +Flow 1010 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1046 +Flow 347 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1047 +Flow 439 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1048 +Flow 396 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1047 +Flow 1932 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1049 +Flow 468 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1048 +Flow 1990 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1049 +Flow 1103 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1050 +Flow 1152 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1050 +Flow 891 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1051 +Flow 434 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:60443 +Flow 964 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1051 +Flow 690 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1052 +Flow 473 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:60443 +Flow 757 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1052 +Flow 584 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1053 +Flow 1520 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1054 +Flow 671 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1053 +Flow 1603 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1054 +Flow 1331 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1055 +Flow 1414 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1055 +Flow 128 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7200 +Flow 43 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1056 +Flow 583 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7201 +Flow 164 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7200 +Flow 1742 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1057 +Flow 85 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1056 +Flow 1812 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1057 +Flow 672 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7201 +Flow 569 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1058 +Flow 988 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1059 +Flow 651 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1058 +Flow 1059 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1059 +Flow 348 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1060 +Flow 1249 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1061 +Flow 395 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1060 +Flow 1311 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1061 +Flow 1066 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1062 +Flow 1797 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1063 +Flow 1131 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1062 +Flow 1860 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1063 +Flow 214 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1064 +Flow 508 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1065 +Flow 242 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1064 +Flow 836 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1066 +Flow 563 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1065 +Flow 911 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1066 +Flow 104 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1067 +Flow 1295 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1068 +Flow 146 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1067 +Flow 1355 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1068 +Flow 1349 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1069 +Flow 1396 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1069 +Flow 418 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1070 +Flow 448 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1070 +Flow 207 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1071 +Flow 744 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1072 +Flow 249 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1071 +Flow 811 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1072 +Flow 175 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1073 +Flow 1650 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1074 +Flow 199 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1073 +Flow 1721 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1074 +Flow 97 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1075 +Flow 1483 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1076 +Flow 153 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1075 +Flow 1566 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1076 +Flow 1333 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1077 +Flow 1412 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1077 +Flow 748 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1078 +Flow 807 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1078 +Flow 771 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1079 +Flow 826 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1079 +Flow 618 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:54328 +Flow 1490 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1081 +Flow 679 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:54328 +Flow 1559 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1081 +Flow 842 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1082 +Flow 905 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1082 +Flow 714 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1083 +Flow 791 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1083 +Flow 261 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1084 +Flow 768 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1085 +Flow 277 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1084 +Flow 829 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1085 +Flow 689 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1086 +Flow 758 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1086 +Flow 383 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1087 +Flow 521 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1088 +Flow 401 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1087 +Flow 1679 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1089 +Flow 550 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1088 +Flow 1748 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1089 +Flow 1629 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1090 +Flow 1712 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1090 +Flow 1521 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:21571 +Flow 1137 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1091 +Flow 946 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27715 +Flow 1602 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:21571 +Flow 1930 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1092 +Flow 1210 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1091 +Flow 1009 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27715 +Flow 1992 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1092 +Flow 896 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1093 +Flow 1646 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1094 +Flow 959 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1093 +Flow 260 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5190 +Flow 1725 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1094 +Flow 278 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5190 +Flow 213 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1095 +Flow 598 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1096 +Flow 243 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1095 +Flow 657 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1096 +Flow 422 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1097 +Flow 1934 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9290 +Flow 1257 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1098 +Flow 444 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1097 +Flow 1988 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9290 +Flow 1303 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1098 +Flow 1045 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1099 +Flow 1166 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1100 +Flow 1110 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1099 +Flow 1241 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1100 +Flow 1533 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1102 +Flow 1620 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1102 +Flow 1941 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1104 +Flow 438 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5200 +Flow 1981 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1104 +Flow 1178 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1105 +Flow 469 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5200 +Flow 1229 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1105 +Flow 1144 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1106 +Flow 1582 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1107 +Flow 1203 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1106 +Flow 1828 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1108 +Flow 1668 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1107 +Flow 1903 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1108 +Flow 1943 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1110 +Flow 1979 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1110 +Flow 215 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1111 +Flow 1033 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1112 +Flow 241 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1111 +Flow 1517 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1113 +Flow 1122 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1112 +Flow 1581 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1113 +Flow 1395 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1114 +Flow 1454 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1114 +Flow 1071 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1117 +Flow 1126 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1117 +Flow 288 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5214 +Flow 332 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5214 +Flow 805 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3168 +Flow 1215 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1121 +Flow 850 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3168 +Flow 1283 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1121 +Flow 1223 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1122 +Flow 1275 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1122 +Flow 265 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1123 +Flow 1252 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1124 +Flow 314 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1123 +Flow 1308 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1124 +Flow 338 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5221 +Flow 1339 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1126 +Flow 1165 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5222 +Flow 364 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5221 +Flow 1406 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1126 +Flow 1242 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5222 +Flow 1850 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5225 +Flow 1911 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5225 +Flow 1525 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1130 +Flow 1476 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5226 +Flow 1598 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1130 +Flow 1573 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5226 +Flow 271 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1131 +Flow 106 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:33899 +Flow 1188 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1132 +Flow 308 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1131 +Flow 144 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:33899 +Flow 1268 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1132 +Flow 1189 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:64623 +Flow 1267 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:64623 +Flow 993 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1137 +Flow 1141 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1138 +Flow 1054 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1137 +Flow 1206 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1138 +Flow 772 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1141 +Flow 825 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1141 +Flow 1326 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1145 +Flow 1419 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1145 +Flow 1501 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1147 +Flow 1548 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1147 +Flow 1173 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50300 +Flow 725 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1148 +Flow 1234 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50300 +Flow 1747 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1149 +Flow 780 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1148 +Flow 1807 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1149 +Flow 424 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1151 +Flow 1800 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1152 +Flow 442 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1151 +Flow 1857 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1152 +Flow 345 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1154 +Flow 398 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1154 +Flow 454 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:25734 +Flow 1686 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:25735 +Flow 494 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:25734 +Flow 1771 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:25735 +Flow 1673 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3211 +Flow 1246 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1163 +Flow 1754 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3211 +Flow 1314 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1163 +Flow 882 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1164 +Flow 973 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1164 +Flow 737 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1165 +Flow 818 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1165 +Flow 373 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1166 +Flow 411 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1166 +Flow 251 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44176 +Flow 174 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13456 +Flow 287 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44176 +Flow 547 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1169 +Flow 200 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13456 +Flow 600 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1169 +Flow 1946 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5269 +Flow 1366 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3221 +Flow 1976 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5269 +Flow 1428 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3221 +Flow 1020 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1174 +Flow 1180 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1175 +Flow 1085 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1174 +Flow 1227 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1175 +Flow 252 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1183 +Flow 835 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5280 +Flow 286 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1183 +Flow 912 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5280 +Flow 566 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1185 +Flow 949 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1186 +Flow 654 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1185 +Flow 1006 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1186 +Flow 127 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1187 +Flow 165 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1187 +Flow 952 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:64680 +Flow 874 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1192 +Flow 1003 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:64680 +Flow 931 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1192 +Flow 1782 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1198 +Flow 1875 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1198 +Flow 718 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1199 +Flow 787 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1199 +Flow 591 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1201 +Flow 1220 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5298 +Flow 664 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1201 +Flow 1278 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5298 +Flow 1181 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3260 +Flow 1952 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3261 +Flow 1637 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1213 +Flow 1226 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3260 +Flow 1970 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3261 +Flow 1704 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1213 +Flow 573 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1216 +Flow 1067 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1217 +Flow 647 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1216 +Flow 1130 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1217 +Flow 685 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1218 +Flow 762 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1218 +Flow 1948 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3268 +Flow 1974 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3268 +Flow 1433 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3269 +Flow 1513 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3269 +Flow 464 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9415 +Flow 484 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9415 +Flow 52 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1233 +Flow 1804 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1234 +Flow 76 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1233 +Flow 1853 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1234 +Flow 1325 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3283 +Flow 1823 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1236 +Flow 1420 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3283 +Flow 1883 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1236 +Flow 1806 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50389 +Flow 1882 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50389 +Flow 297 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1244 +Flow 323 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1244 +Flow 110 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1247 +Flow 568 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1248 +Flow 141 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1247 +Flow 652 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1248 +Flow 1191 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3300 +Flow 1265 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3300 +Flow 505 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3301 +Flow 526 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3301 +Flow 1698 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7402 +Flow 1759 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7402 +Flow 510 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1259 +Flow 561 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1259 +Flow 1681 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5357 +Flow 1756 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5357 +Flow 697 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1271 +Flow 1213 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1272 +Flow 750 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1271 +Flow 1285 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1272 +Flow 1375 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3322 +Flow 1444 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3322 +Flow 1386 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3323 +Flow 1630 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3324 +Flow 1463 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3323 +Flow 1711 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3324 +Flow 1069 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3325 +Flow 571 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1277 +Flow 1128 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3325 +Flow 649 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1277 +Flow 1473 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:40193 +Flow 1576 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:40193 +Flow 1377 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3333 +Flow 1452 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3333 +Flow 1321 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1287 +Flow 1424 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1287 +Flow 1498 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7435 +Flow 1551 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7435 +Flow 797 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9485 +Flow 858 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9485 +Flow 137 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1296 +Flow 155 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1296 +Flow 1438 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7443 +Flow 1508 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7443 +Flow 98 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1300 +Flow 632 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1301 +Flow 152 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1300 +Flow 705 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1301 +Flow 1736 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3351 +Flow 1818 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3351 +Flow 171 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9500 +Flow 738 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5405 +Flow 620 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1309 +Flow 203 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9500 +Flow 943 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9502 +Flow 817 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5405 +Flow 1393 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1310 +Flow 677 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1309 +Flow 1456 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1310 +Flow 1065 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9503 +Flow 1012 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9502 +Flow 111 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1311 +Flow 1132 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9503 +Flow 140 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1311 +Flow 48 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5414 +Flow 593 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3367 +Flow 80 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5414 +Flow 662 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3367 +Flow 294 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3369 +Flow 1345 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3370 +Flow 543 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1322 +Flow 326 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3369 +Flow 1535 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3371 +Flow 1400 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3370 +Flow 604 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1322 +Flow 1845 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3372 +Flow 1618 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3371 +Flow 173 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15660 +Flow 1916 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3372 +Flow 201 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15660 +Flow 693 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30000 +Flow 372 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1328 +Flow 754 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30000 +Flow 412 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1328 +Flow 1585 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1334 +Flow 1665 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1334 +Flow 257 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5431 +Flow 281 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5431 diff --git a/test/results/flow-captured/default/syslog.pcap.out b/test/results/flow-captured/default/syslog.pcap.out index ed112f18b..7e9329201 100644 --- a/test/results/flow-captured/default/syslog.pcap.out +++ b/test/results/flow-captured/default/syslog.pcap.out @@ -1 +1,3 @@ +Flow 6 not-detected: 41 216.66.80.30 -> 193.24.227.12 +Flow 5 not-detected: 41 193.24.227.10 -> 216.66.86.114 Flow 15 risky: tcp 10.186.117.194:49948 -> 169.46.82.162:52173 diff --git a/test/results/flow-captured/default/tcp_scan.pcapng.out b/test/results/flow-captured/default/tcp_scan.pcapng.out index e69de29bb..7674c7091 100644 --- a/test/results/flow-captured/default/tcp_scan.pcapng.out +++ b/test/results/flow-captured/default/tcp_scan.pcapng.out @@ -0,0 +1,6 @@ +Flow 6 not-detected: tcp 192.168.1.178:57916 -> 192.168.1.2:3391 +Flow 6 midstream: tcp 192.168.1.178:57916 -> 192.168.1.2:3391 +Flow 5 not-detected: tcp 192.168.1.178:62971 -> 192.168.1.2:3390 +Flow 5 midstream: tcp 192.168.1.178:62971 -> 192.168.1.2:3390 +Flow 7 not-detected: tcp 192.168.1.178:63243 -> 192.168.1.2:3392 +Flow 7 midstream: tcp 192.168.1.178:63243 -> 192.168.1.2:3392 diff --git a/test/results/flow-captured/default/teams.pcap.out b/test/results/flow-captured/default/teams.pcap.out index 7cab07517..7a0343add 100644 --- a/test/results/flow-captured/default/teams.pcap.out +++ b/test/results/flow-captured/default/teams.pcap.out @@ -13,6 +13,8 @@ Flow 51 risky: tcp 192.168.1.6:60561 -> 52.114.77.33:443 Flow 74 risky: tcp 192.168.1.6:60567 -> 52.114.77.136:443 Flow 30 risky: tcp 192.168.1.6:60546 -> 167.99.215.164:4434 Flow 61 risky: tcp 192.168.1.6:60566 -> 167.99.215.164:4434 +Flow 60 not-detected: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 +Flow 60 midstream: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 Flow 10 risky: udp 192.168.1.6:64046 -> 192.168.1.1:53 Flow 81 risky: udp 52.114.252.8:3479 -> 192.168.1.6:50016 diff --git a/test/results/flow-captured/default/telegram.pcap.out b/test/results/flow-captured/default/telegram.pcap.out index ce4c4dfbb..875f302c4 100644 --- a/test/results/flow-captured/default/telegram.pcap.out +++ b/test/results/flow-captured/default/telegram.pcap.out @@ -1,5 +1,7 @@ Flow 32 risky: udp 192.168.1.77:5812 -> 192.168.1.1:53 Flow 27 risky: udp 192.168.1.77:47127 -> 192.168.1.1:53 Flow 29 risky: udp 192.168.1.43:138 -> 192.168.1.255:138 +Flow 44 not-detected: udp 192.168.1.77:28150 -> 87.11.205.195:59772 Flow 26 risky: udp 192.168.1.77:23174 -> 87.11.205.195:60723 Flow 33 risky: udp 192.168.1.77:54595 -> 192.168.1.1:53 +Flow 25 not-detected: udp 192.168.1.77:23174 -> 192.168.1.52:31480 diff --git a/test/results/flow-captured/default/tls_certificate_too_long.pcap.out b/test/results/flow-captured/default/tls_certificate_too_long.pcap.out index 63bef1023..da31cb0fa 100644 --- a/test/results/flow-captured/default/tls_certificate_too_long.pcap.out +++ b/test/results/flow-captured/default/tls_certificate_too_long.pcap.out @@ -7,3 +7,5 @@ Flow 19 risky: tcp 192.168.1.121:53913 -> 2.22.33.235:80 Flow 23 risky: udp 192.168.1.121:51998 -> 8.8.8.8:53 Flow 3 risky: udp 192.168.1.121:52251 -> 8.8.8.8:53 Flow 20 midstream: tcp 192.168.1.121:53905 -> 140.82.113.26:443 +Flow 2 not-detected: tcp 192.168.1.121:52721 -> 192.168.1.139:55367 +Flow 2 midstream: tcp 192.168.1.121:52721 -> 192.168.1.139:55367 diff --git a/test/results/flow-captured/default/tls_false_positives.pcapng.out b/test/results/flow-captured/default/tls_false_positives.pcapng.out index e69de29bb..014d61e8e 100644 --- a/test/results/flow-captured/default/tls_false_positives.pcapng.out +++ b/test/results/flow-captured/default/tls_false_positives.pcapng.out @@ -0,0 +1 @@ +Flow 1 not-detected: tcp 10.10.10.1:1445 -> 192.168.0.1:20979 diff --git a/test/results/flow-captured/default/wa_voice.pcap.out b/test/results/flow-captured/default/wa_voice.pcap.out index d2c04c6b4..d6eb995ec 100644 --- a/test/results/flow-captured/default/wa_voice.pcap.out +++ b/test/results/flow-captured/default/wa_voice.pcap.out @@ -1,4 +1,6 @@ Flow 23 risky: udp 91.252.56.51:32704 -> 192.168.2.12:56328 Flow 3 midstream: tcp 192.168.2.12:49354 -> 17.242.60.84:5223 +Flow 25 not-detected: tcp 192.168.2.12:49352 -> 169.254.162.244:49159 +Flow 25 midstream: tcp 192.168.2.12:49352 -> 169.254.162.244:49159 Flow 9 midstream: tcp 17.171.47.85:443 -> 192.168.2.12:50502 Flow 24 risky: udp 192.168.2.12:56328 -> 1.60.78.64:64282 diff --git a/test/results/flow-captured/default/waze.pcap.out b/test/results/flow-captured/default/waze.pcap.out index c812b7446..5e77b6b5a 100644 --- a/test/results/flow-captured/default/waze.pcap.out +++ b/test/results/flow-captured/default/waze.pcap.out @@ -4,3 +4,5 @@ Flow 6 risky: tcp 10.8.0.1:36102 -> 46.51.173.182:443 Flow 5 risky: tcp 10.8.0.1:36100 -> 46.51.173.182:443 Flow 19 risky: tcp 10.8.0.1:36312 -> 176.34.186.180:443 Flow 7 risky: tcp 10.8.0.1:36585 -> 173.194.118.48:443 +Flow 1 not-detected: tcp 10.16.37.157:42256 -> 174.37.231.81:5222 +Flow 1 midstream: tcp 10.16.37.157:42256 -> 174.37.231.81:5222 diff --git a/test/results/flow-captured/enable_payload_stat/1kxun.pcap.out b/test/results/flow-captured/enable_payload_stat/1kxun.pcap.out index e951b4706..e818177e6 100644 --- a/test/results/flow-captured/enable_payload_stat/1kxun.pcap.out +++ b/test/results/flow-captured/enable_payload_stat/1kxun.pcap.out @@ -10,18 +10,32 @@ Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 39 risky: udp 192.168.115.8:54420 -> 8.8.8.8:53 Flow 26 risky: udp 192.168.115.8:60724 -> 8.8.8.8:53 Flow 33 risky: udp fe80::e98f:bae2:19f7:6b0f:54888 -> ff02::1:3:5355 +Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 +Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 +Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 +Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 Flow 38 risky: tcp 192.168.115.8:49607 -> 218.244.135.170:9099 +Flow 42 not-detected: udp 192.168.10.110:60480 -> 255.255.255.255:62976 +Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 Flow 45 risky: tcp 192.168.5.16:53623 -> 192.168.115.75:443 Flow 87 risky: tcp 192.168.5.16:53625 -> 192.168.115.75:443 Flow 107 risky: tcp 192.168.5.16:53626 -> 192.168.115.75:443 Flow 117 risky: tcp 192.168.5.16:53629 -> 192.168.115.75:443 +Flow 65 not-detected: udp 192.168.140.140:62976 -> 255.255.255.255:62976 +Flow 71 not-detected: udp 192.168.10.7:62976 -> 255.255.255.255:62976 +Flow 22 not-detected: udp 192.168.125.30:62976 -> 255.255.255.255:62976 +Flow 88 not-detected: udp 192.168.119.1:56861 -> 255.255.255.255:5678 +Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 Flow 46 risky: tcp 192.168.115.8:49612 -> 183.131.48.145:80 Flow 49 risky: tcp 192.168.115.8:49613 -> 183.131.48.144:80 +Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 +Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 +Flow 86 not-detected: udp 59.120.208.212:32768 -> 255.255.255.255:1947 Flow 142 midstream: tcp 192.168.2.126:46170 -> 172.105.121.82:80 Flow 146 midstream: tcp 192.168.2.126:45380 -> 161.117.13.29:80 Flow 160 midstream: tcp 192.168.2.126:49380 -> 14.136.136.108:80 diff --git a/test/results/flow-captured/enable_stun_monitoring_with_subproto/wa_voice.pcap.out b/test/results/flow-captured/enable_stun_monitoring_with_subproto/wa_voice.pcap.out index d2c04c6b4..d6eb995ec 100644 --- a/test/results/flow-captured/enable_stun_monitoring_with_subproto/wa_voice.pcap.out +++ b/test/results/flow-captured/enable_stun_monitoring_with_subproto/wa_voice.pcap.out @@ -1,4 +1,6 @@ Flow 23 risky: udp 91.252.56.51:32704 -> 192.168.2.12:56328 Flow 3 midstream: tcp 192.168.2.12:49354 -> 17.242.60.84:5223 +Flow 25 not-detected: tcp 192.168.2.12:49352 -> 169.254.162.244:49159 +Flow 25 midstream: tcp 192.168.2.12:49352 -> 169.254.162.244:49159 Flow 9 midstream: tcp 17.171.47.85:443 -> 192.168.2.12:50502 Flow 24 risky: udp 192.168.2.12:56328 -> 1.60.78.64:64282 |