diff options
Diffstat (limited to 'test/results/default/blizzard.pcap.out')
| -rw-r--r-- | test/results/default/blizzard.pcap.out | 94 |
1 files changed, 94 insertions, 0 deletions
diff --git a/test/results/default/blizzard.pcap.out b/test/results/default/blizzard.pcap.out new file mode 100644 index 000000000..6e40d30a3 --- /dev/null +++ b/test/results/default/blizzard.pcap.out @@ -0,0 +1,94 @@ +00613{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"max-flows-per-thread":32768,"max-idle-flows-per-thread":1024,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} +00748{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":214643227,"flow_src_last_pkt_time":214643227,"flow_dst_last_pkt_time":214643227,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":214643227,"l3_proto":"ip4","src_ip":"192.168.1.205","dst_ip":"37.244.28.101","src_port":50082,"dst_port":1119,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00520{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":214643227,"flow_dst_last_pkt_time":214643227,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":214643227,"pkt":"ILAB4IZiCAAnOk7TCABFAAA00b5AAIAGJDfAqAHNJfQcZcOiBF8AxoH8AAAAAIACgACfhQAAAgQFtAEDAwABAQQC"} +00521{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":214643227,"flow_dst_last_pkt_time":214668240,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":214668240,"pkt":"CAAnOk7TILAB4IZiCABFAAA0AABAADAGRfYl9BxlwKgBzQRfw6JdjjEBAMaB\/YAS+vCV7QAAAgQFtAEBBAIBAwMH"} +00504{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":214677632,"flow_dst_last_pkt_time":214668240,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":214677632,"pkt":"ILAB4IZiCAAnOk7TCABFAAAo0b9AAIAGJELAqAHNJfQcZcOiBF8AxoH9XY4xAlAQgABRsAAA"} +00513{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":214677632,"flow_dst_last_pkt_time":214703168,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":22,"thread_ts_usec":214703168,"pkt":"CAAnOk7TILAB4IZiCABFAAAqvfJAADAGiA0l9BxlwKgBzQRfw6JdjjECAMaB\/VAYAfZ9qAAAUggAAAAA"} +00894{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":214643227,"flow_src_last_pkt_time":214677632,"flow_dst_last_pkt_time":214703168,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":2,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":2,"midstream":0,"thread_ts_usec":214703168,"l3_proto":"ip4","src_ip":"192.168.1.205","dst_ip":"37.244.28.101","src_port":50082,"dst_port":1119,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00505{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_src_last_pkt_time":214756738,"flow_dst_last_pkt_time":214703168,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":214756738,"pkt":"ILAB4IZiCAAnOk7TCABFAAAo0cBAAIAGJEHAqAHNJfQcZcOiBF8AxoH9XY4xBFAQf\/5RsAAA"} +00750{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":230244648,"flow_src_last_pkt_time":230244648,"flow_dst_last_pkt_time":230244648,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":230244648,"l3_proto":"ip4","src_ip":"192.168.1.205","dst_ip":"137.221.106.59","src_port":50056,"dst_port":1119,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00522{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":230244648,"flow_dst_last_pkt_time":230244648,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":230244648,"pkt":"ILAB4IZiCAAnOk7TCABFAAA05aBAAIAGXpXAqAHNid1qO8OIBF\/xoMmLAAAAAIACgAC1dQAAAgQFtAEDAwABAQQC"} +00513{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":230244648,"flow_dst_last_pkt_time":230408738,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"thread_ts_usec":230408738,"pkt":"CAAnOk7TILAB4IZiCABFAAAs5aBAAHMGa52J3Wo7wKgBzQRfw4hcwMIG8aDJjGASchDNmwAAAgQFtAAA"} +00506{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":230410587,"flow_dst_last_pkt_time":230408738,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":230410587,"pkt":"ILAB4IZiCAAnOk7TCABFAAAo5aFAAIAGXqDAqAHNid1qO8OIBF\/xoMmMXMDCB1AQgADXaAAA"} +00657{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":230553665,"flow_dst_last_pkt_time":230408738,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":163,"pkt_l4_len":129,"thread_ts_usec":230553665,"pkt":"ILAB4IZiCAAnOk7TCABFAACV5aJAAIAGXjLAqAHNid1qO8OIBF\/xoMmMXMDCB1AYgADDcgAAQQAACmZS7cbGZK3KqhMBACmZTiOiGIUp4XgBACmZTiOiGcjFyqkBACmZTiOiGTVjlCEAACmZTiOiGhShThtCNzK6VrcbGgAE5AAJAFhYWFhYWFhYWEBHTUFJTC5DT00BC1hYWFhYMDQwNjMjMQ=="} +00513{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_src_last_pkt_time":230553665,"flow_dst_last_pkt_time":230717876,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":230717876,"pkt":"CAAnOk7TILAB4IZiCABFAAAodKJAADEGHqCJ3Wo7wKgBzQRfw4hcwMIH8aDJ+VAQ+k9crAAAAAAAAAAA"} +00900{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":230244648,"flow_src_last_pkt_time":230553665,"flow_dst_last_pkt_time":230718522,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":109,"flow_dst_max_l4_payload_len":2,"flow_src_tot_l4_payload_len":109,"flow_dst_tot_l4_payload_len":2,"midstream":0,"thread_ts_usec":230718522,"l3_proto":"ip4","src_ip":"192.168.1.205","dst_ip":"137.221.106.59","src_port":50056,"dst_port":1119,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00841{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":45,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":45,"packets-processed":44,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":2058,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":2,"total-detection-updates":0,"total-updates":0,"current-active-flows":2,"total-active-flows":2,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":16,"global_ts_usec":1742849068921784} +00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1742849068921784,"flow_src_last_pkt_time":1742849068921784,"flow_dst_last_pkt_time":1742849068921784,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742849068921784,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"137.221.107.220","src_port":42710,"dst_port":3724,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00557{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1742849068921784,"flow_dst_last_pkt_time":1742849068921784,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1742849068921784,"pkt":"dNo47VMyYhO2esBpCABFAAA86wlAAEAGjQ3AqAxDid1r3KbWDoxt76BvAAAAAKAC\/\/\/Y2gAAAgQFtAQCCAoYoNAcAAAAAAEDAwk="} +00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1742849068921784,"flow_dst_last_pkt_time":1742849069089792,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1742849069089792,"pkt":"YhO2esBpdNo47VMyCABFAAA8AABAADIGhheJ3WvcwKgMQw6MptY4p9XKbe+gcKAS\/ohJHQAAAgQFtAQCCAp8JwaMGKDQHAEDAwc="} +00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1742849069108728,"flow_dst_last_pkt_time":1742849069089792,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1742849069108728,"pkt":"dNo47VMyYhO2esBpCABFAAA06wpAAEAGjRTAqAxDid1r3KbWDoxt76BwOKfVy4AQAKx0\/gAAAQEIChig0OR8JwaM"} +00673{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1742849069258089,"flow_dst_last_pkt_time":1742849069089792,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":161,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":161,"pkt_l4_len":127,"thread_ts_usec":1742849069258089,"pkt":"dNo47VMyYhO2esBpCABFAACT6wtAAEAGjLTAqAxDid1r3KbWDoxt76BwOKfVy4AYAKxSUgAAAQEIChig0Vl8JwaMqAAAAFcAAAAI3OMBEgZPUGJNQU4YgPCyiAIgpykqCDMyLjAuMC4wOjYIBBABGgxYaWFvbWkgTWkgQTMgAiogYjNiNTczODE0ZjRkMDgwNmRhZjFlNzVmNDllNmZlMDQ="} +01059{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1742849068921784,"flow_src_last_pkt_time":1742849069258089,"flow_dst_last_pkt_time":1742849069089792,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":95,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":95,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742849069258089,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"137.221.107.220","src_port":42710,"dst_port":3724,"l4_proto":"tcp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_src_last_pkt_time":1742849069258089,"flow_dst_last_pkt_time":1742849069425734,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1742849069425734,"pkt":"YhO2esBpdNo47VMyCABFAAA0+ZVAADIGjImJ3WvcwKgMQw6MptY4p9XLbe+gz4AQAf1xiQAAAQEICnwnB9wYoNFZ"} +00951{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":11,"flow_dst_packets_processed":8,"flow_first_seen":230244648,"flow_src_last_pkt_time":232491522,"flow_dst_last_pkt_time":232345391,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":109,"flow_dst_max_l4_payload_len":615,"flow_src_tot_l4_payload_len":196,"flow_dst_tot_l4_payload_len":811,"midstream":0,"thread_ts_usec":1742849070875606,"l3_proto":"ip4","src_ip":"192.168.1.205","dst_ip":"137.221.106.59","src_port":50056,"dst_port":1119,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00950{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":8,"flow_first_seen":214643227,"flow_src_last_pkt_time":216090440,"flow_dst_last_pkt_time":216029758,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":109,"flow_dst_max_l4_payload_len":615,"flow_src_tot_l4_payload_len":334,"flow_dst_tot_l4_payload_len":717,"midstream":0,"thread_ts_usec":1742849070875606,"l3_proto":"ip4","src_ip":"192.168.1.205","dst_ip":"37.244.28.101","src_port":50082,"dst_port":1119,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00841{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":66,"packets-processed":65,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":5091,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":3,"total-detection-updates":0,"total-updates":0,"current-active-flows":1,"total-active-flows":3,"total-idle-flows":2,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":26,"global_ts_usec":1742892681221649} +00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1742892681221649,"flow_src_last_pkt_time":1742892681221649,"flow_dst_last_pkt_time":1742892681221649,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":18,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":18,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":18,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742892681221649,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"34.171.17.90","src_port":1120,"dst_port":50000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00533{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1742892681221649,"flow_dst_last_pkt_time":1742892681221649,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"thread_ts_usec":1742892681221649,"pkt":"dNo47VMyYhO2esBpCABFAAAujrpAAEARqxTAqAxDIqsRWgRgw1AAGm9cZFhNdFkyVnVkSAEAAAABAAAA"} +01059{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1742892681221649,"flow_src_last_pkt_time":1742892681221649,"flow_dst_last_pkt_time":1742892681221649,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":18,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":18,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":18,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742892681221649,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"34.171.17.90","src_port":1120,"dst_port":50000,"l4_proto":"udp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"GoogleCloud","proto_by_ip_id":284,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00529{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1742892681221649,"flow_dst_last_pkt_time":1742892681342969,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":57,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":57,"pkt_l4_len":23,"thread_ts_usec":1742892681342969,"pkt":"YhO2esBpdNo47VMyCABFYAAryC9AADcRekIiqxFawKgMQ8NQBGAAF29iZFhNdFkyVnVkSAEAAAAB"} +00533{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1742892683267707,"flow_dst_last_pkt_time":1742892681342969,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"thread_ts_usec":1742892683267707,"pkt":"dNo47VMyYhO2esBpCABFAAAuj0dAAEARqofAqAxDIqsRWgRgw1AAGm5cZFhNdFkyVnVkSAEAAAACAAAA"} +00529{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_src_last_pkt_time":1742892683267707,"flow_dst_last_pkt_time":1742892683388541,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":57,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":57,"pkt_l4_len":23,"thread_ts_usec":1742892683388541,"pkt":"YhO2esBpdNo47VMyCABFYAArzIdAADcRdeoiqxFawKgMQ8NQBGAAF25iZFhNdFkyVnVkSAEAAAAC"} +00533{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":5,"flow_src_last_pkt_time":1742892685290956,"flow_dst_last_pkt_time":1742892683388541,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":26,"thread_ts_usec":1742892685290956,"pkt":"dNo47VMyYhO2esBpCABFAAAukApAAEARqcTAqAxDIqsRWgRgw1AAGm1cZFhNdFkyVnVkSAEAAAADAAAA"} +01107{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":76,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":11,"flow_dst_packets_processed":10,"flow_first_seen":1742849068921784,"flow_src_last_pkt_time":1742849070875606,"flow_dst_last_pkt_time":1742849070838998,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":95,"flow_dst_max_l4_payload_len":1448,"flow_src_tot_l4_payload_len":111,"flow_dst_tot_l4_payload_len":2922,"midstream":0,"thread_ts_usec":1742892689663566,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"137.221.107.220","src_port":42710,"dst_port":3724,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1742892725101885,"flow_src_last_pkt_time":1742892725101885,"flow_dst_last_pkt_time":1742892725101885,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":23,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":23,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":23,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742892725101885,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"34.22.163.26","src_port":44282,"dst_port":7521,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1742892725101885,"flow_dst_last_pkt_time":1742892725101885,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"thread_ts_usec":1742892725101885,"pkt":"dNo47VMyYhO2esBpCABFAAAzTUxAAEARW1LAqAxDIhajGqz6HWEAHwXz\/\/\/\/\/6Mfth4AAEABAAAAAAAAAAQDAgE="} +01059{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1742892725101885,"flow_src_last_pkt_time":1742892725101885,"flow_dst_last_pkt_time":1742892725101885,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":23,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":23,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":23,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1742892725101885,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"34.22.163.26","src_port":44282,"dst_port":7521,"l4_proto":"udp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"GoogleCloud","proto_by_ip_id":284,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":1742892725101885,"flow_dst_last_pkt_time":1742892725121081,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":65,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":65,"pkt_l4_len":31,"thread_ts_usec":1742892725121081,"pkt":"YhO2esBpdNo47VMyCABFAAAzAABAADcRsZ4iFqMawKgMQx1hrPoAH3WpBAMCATfaqGoAAEABAAAAAQAAAEIGAgE="} +00537{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_src_last_pkt_time":1742892725125357,"flow_dst_last_pkt_time":1742892725121081,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":61,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":61,"pkt_l4_len":27,"thread_ts_usec":1742892725125357,"pkt":"dNo47VMyYhO2esBpCABFAAAvTU1AAEARW1XAqAxDIhajGqz6HWEAG9Q7QgYCAaqM4G0AAQABAAAAAQAAAA=="} +01190{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":4,"flow_src_last_pkt_time":1742892725419082,"flow_dst_last_pkt_time":1742892725121081,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":542,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":542,"pkt_l4_len":508,"thread_ts_usec":1742892725419082,"pkt":"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"} +01192{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":5,"flow_src_last_pkt_time":1742892725422392,"flow_dst_last_pkt_time":1742892725121081,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":542,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":542,"pkt_l4_len":508,"thread_ts_usec":1742892725422392,"pkt":"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"} +01107{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":110,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":13,"flow_first_seen":1742892681221649,"flow_src_last_pkt_time":1742892736422854,"flow_dst_last_pkt_time":1742892736543501,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":18,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":18,"flow_dst_max_l4_payload_len":15,"flow_src_tot_l4_payload_len":234,"flow_dst_tot_l4_payload_len":195,"midstream":0,"thread_ts_usec":1742892736543501,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"34.171.17.90","src_port":1120,"dst_port":50000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"GoogleCloud","proto_by_ip_id":284,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00845{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":110,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":110,"packets-processed":109,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":10058,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":5,"total-detection-updates":0,"total-updates":1,"current-active-flows":2,"total-active-flows":5,"total-idle-flows":3,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":43,"global_ts_usec":1743254837313361} +00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":110,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1743254837313361,"flow_src_last_pkt_time":1743254837313361,"flow_dst_last_pkt_time":1743254837313361,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1743254837313361,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"66.40.180.215","src_port":50015,"dst_port":3724,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1743254837313361,"flow_dst_last_pkt_time":1743254837313361,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1743254837313361,"pkt":"ILAB4IZiSKRyNpegCABFAAA0UHFAAIAG8TXAqAF1Qii018NfDowlhAQUAAAAAIAC\/\/+6bwAAAgQFtAEDAwgBAQQC"} +00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_src_last_pkt_time":1743254837313361,"flow_dst_last_pkt_time":1743254837345750,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1743254837345750,"pkt":"SKRyNpegILAB4IZiCABFAAA0AABAADAGkadCKLTXwKgBdQ6Mw1\/2WbxuJYQEFYAS+vAMpQAAAgQFtAEBBAIBAwMI"} +00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_src_last_pkt_time":1743254837345889,"flow_dst_last_pkt_time":1743254837345750,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1743254837345889,"pkt":"ILAB4IZiSKRyNpegCABFAAAoUHJAAIAG8UDAqAF1Qii018NfDowlhAQV9lm8b1AQAP9HagAA"} +00603{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":4,"flow_src_last_pkt_time":1743254837345889,"flow_dst_last_pkt_time":1743254837372278,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"thread_ts_usec":1743254837372278,"pkt":"SKRyNpegILAB4IZiCABFAABdLN9AADAGZJ9CKLTXwKgBdQ6Mw1\/2WbxvJYQEFVAYAPs\/fwAAV09STEQgT0YgV0FSQ1JBRlQgQ09OTkVDVElPTiAtIFNFUlZFUiBUTyBDTElFTlQgLSBWMgo="} +00932{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":1743254837313361,"flow_src_last_pkt_time":1743254837345889,"flow_dst_last_pkt_time":1743254837372278,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":53,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":53,"midstream":0,"thread_ts_usec":1743254837372278,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"66.40.180.215","src_port":50015,"dst_port":3724,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"WorldOfWarcraft","proto_id":"76","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00602{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":5,"flow_src_last_pkt_time":1743254837372461,"flow_dst_last_pkt_time":1743254837372278,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":107,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":107,"pkt_l4_len":73,"thread_ts_usec":1743254837372461,"pkt":"ILAB4IZiSKRyNpegCABFAABdUHNAAIAG8QrAqAF1Qii018NfDowlhAQV9lm8pFAYAP8\/RgAAV09STEQgT0YgV0FSQ1JBRlQgQ09OTkVDVElPTiAtIENMSUVOVCBUTyBTRVJWRVIgLSBWMgo="} +01108{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":141,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":8,"flow_dst_packets_processed":10,"flow_first_seen":1742892725101885,"flow_src_last_pkt_time":1742892725424444,"flow_dst_last_pkt_time":1742892725566165,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":19,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":500,"flow_dst_max_l4_payload_len":500,"flow_src_tot_l4_payload_len":2901,"flow_dst_tot_l4_payload_len":1637,"midstream":0,"thread_ts_usec":1743254843020240,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"34.22.163.26","src_port":44282,"dst_port":7521,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"GoogleCloud","proto_by_ip_id":284,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +01105{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":141,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":13,"flow_first_seen":1742892681221649,"flow_src_last_pkt_time":1742892736422854,"flow_dst_last_pkt_time":1742892736543501,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":18,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":18,"flow_dst_max_l4_payload_len":15,"flow_src_tot_l4_payload_len":234,"flow_dst_tot_l4_payload_len":195,"midstream":0,"thread_ts_usec":1743254843020240,"l3_proto":"ip4","src_ip":"192.168.12.67","dst_ip":"34.171.17.90","src_port":1120,"dst_port":50000,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"GoogleCloud","proto_by_ip_id":284,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00845{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":141,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":141,"packets-processed":140,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":20857,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":6,"total-detection-updates":0,"total-updates":1,"current-active-flows":1,"total-active-flows":6,"total-idle-flows":5,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":53,"global_ts_usec":1743340090407216} +00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":141,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1743340090407216,"flow_src_last_pkt_time":1743340090407216,"flow_dst_last_pkt_time":1743340090407216,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1743340090407216,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"66.40.191.253","src_port":60378,"dst_port":3724,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1743340090407216,"flow_dst_last_pkt_time":1743340090407216,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1743340090407216,"pkt":"ILAB4IZiSKRyNpegCABFAAA0Y1pAAIAG0ybAqAF1Qii\/\/evaDoz9qM7iAAAAAIAC\/\/\/j2gAAAgQFtAEDAwgBAQQC"} +00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_src_last_pkt_time":1743340090407216,"flow_dst_last_pkt_time":1743340090438479,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1743340090438479,"pkt":"SKRyNpegILAB4IZiCABFAAA0AABAADAGhoFCKL\/9wKgBdQ6M69qdpmKv\/ajO44AS+vDogwAAAgQFtAEBBAIBAwMH"} +00529{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":3,"flow_src_last_pkt_time":1743340090438618,"flow_dst_last_pkt_time":1743340090438479,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1743340090438618,"pkt":"ILAB4IZiSKRyNpegCABFAAAoY1tAAIAG0zHAqAF1Qii\/\/evaDoz9qM7jnaZisFAQAP8jSAAA"} +00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":4,"flow_src_last_pkt_time":1743340090477665,"flow_dst_last_pkt_time":1743340090438479,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":71,"pkt_l4_len":37,"thread_ts_usec":1743340090477665,"pkt":"ILAB4IZiSKRyNpegCABFAAA5Y1xAAIAG0x\/AqAF1Qii\/\/evaDoz9qM7jnaZisFAYAP\/FJAAASEVMTE8gUFJPIENMSUVOVAA="} +01058{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":144,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1743340090407216,"flow_src_last_pkt_time":1743340090477665,"flow_dst_last_pkt_time":1743340090438479,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":17,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":17,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1743340090477665,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"66.40.191.253","src_port":60378,"dst_port":3724,"l4_proto":"tcp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00537{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":5,"flow_src_last_pkt_time":1743340090477665,"flow_dst_last_pkt_time":1743340090504237,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1743340090504237,"pkt":"SKRyNpegILAB4IZiCABFAAAolNdAADAG8bVCKL\/9wKgBdQ6M69qdpmKw\/ajO9FAQAfYiQAAAAAAAAAAA"} +00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1743340096015463,"flow_src_last_pkt_time":1743340096015463,"flow_dst_last_pkt_time":1743340096015463,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1743340096015463,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"137.221.72.99","src_port":63711,"dst_port":29523,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1743340096015463,"flow_dst_last_pkt_time":1743340096015463,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1743340096015463,"pkt":"ILAB4IZiSKRyNpegCABFAABEklEAAIARE\/rAqAF1id1IY\/jfc1MAMP6TpHCABQiOda559OCTwn8crQkAAAAAAAAA6G3CO0kDAAAg6G9rlwAAAA=="} +01059{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1743340096015463,"flow_src_last_pkt_time":1743340096015463,"flow_dst_last_pkt_time":1743340096015463,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1743340096015463,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"137.221.72.99","src_port":63711,"dst_port":29523,"l4_proto":"udp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_src_last_pkt_time":1743340096015463,"flow_dst_last_pkt_time":1743340096135118,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1743340096135118,"pkt":"SKRyNpegILAB4IZiCABFAABEklEAAFcRPPqJ3UhjwKgBdXNT+N8AMP6TpHCABQiOda559OCTwn8crQkAAAAAAAAA6G3CO0kDAAAg6G9rlwAAAA=="} +00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":3,"flow_src_last_pkt_time":1743340096304355,"flow_dst_last_pkt_time":1743340096135118,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1743340096304355,"pkt":"ILAB4IZiSKRyNpegCABFAABEklIAAIARE\/nAqAF1id1IY\/jfc1MAMNUJpHCABQiOda559OCTwn8crQkAAAABAAAAtOX+TEkDAABA6W9rlwAAAA=="} +00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":4,"flow_src_last_pkt_time":1743340096304355,"flow_dst_last_pkt_time":1743340096430690,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1743340096430690,"pkt":"SKRyNpegILAB4IZiCABFAABEklIAAFcRPPmJ3UhjwKgBdXNT+N8AMNUJpHCABQiOda559OCTwn8crQkAAAABAAAAtOX+TEkDAABA6W9rlwAAAA=="} +00569{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":5,"flow_src_last_pkt_time":1743340096598002,"flow_dst_last_pkt_time":1743340096430690,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1743340096598002,"pkt":"ILAB4IZiSKRyNpegCABFAABEklMAAIARE\/jAqAF1id1IY\/jfc1MAMHMIpHCABQiOda559OCTwn8crQkAAAACAAAA5NJ\/XkkDAADw629rlwAAAA=="} +00981{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":191,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":18,"flow_first_seen":1743254837313361,"flow_src_last_pkt_time":1743254843020240,"flow_dst_last_pkt_time":1743254843020127,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":928,"flow_dst_max_l4_payload_len":5840,"flow_src_tot_l4_payload_len":1073,"flow_dst_tot_l4_payload_len":9726,"midstream":0,"thread_ts_usec":1743340098487647,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"66.40.180.215","src_port":50015,"dst_port":3724,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"WorldOfWarcraft","proto_id":"76","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00782{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":191,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1743340103372399,"flow_src_last_pkt_time":1743340103372399,"flow_dst_last_pkt_time":1743340103372399,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1743340103372399,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"137.221.82.101","src_port":58787,"dst_port":29503,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00578{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1743340103372399,"flow_dst_last_pkt_time":1743340103372399,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1743340103372399,"pkt":"ILAB4IZiSKRyNpegCABFAABODCwAAIARkBPAqAF1id1SZeWjcz8AOgfINWwVMEcb3vw7Usqi0Vu5uXUqWEtkH6FOO+1V45DtB2EAAAAAAAAAAAAAAAAAAAAAAa0="} +01060{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":191,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1743340103372399,"flow_src_last_pkt_time":1743340103372399,"flow_dst_last_pkt_time":1743340103372399,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1743340103372399,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"137.221.82.101","src_port":58787,"dst_port":29503,"l4_proto":"udp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00581{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":2,"flow_src_last_pkt_time":1743340103372399,"flow_dst_last_pkt_time":1743340103536486,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1743340103536486,"pkt":"SKRyNpegILAB4IZiCABFAABONr1AACwReYKJ3VJlwKgBdXM\/5aMAOu\/sAAAAAAAAAAAAAAAAAAAAABaiqFkBsTe\/fB0FxZDtB2EAAAAAAQAAAAEAAAAAAAAAA60="} +00578{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_src_last_pkt_time":1743340103541202,"flow_dst_last_pkt_time":1743340103536486,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1743340103541202,"pkt":"ILAB4IZiSKRyNpegCABFAABODC0AAIARkBLAqAF1id1SZeWjcz8AOu6cNWwVMEcb3vw7Usqi0Vu5uZKbdoAt5a75vWrVeZDtB2ECAAAAAQAAAAEAAAAAAAAAAq0="} +00580{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":4,"flow_src_last_pkt_time":1743340103541202,"flow_dst_last_pkt_time":1743340103722729,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1743340103722729,"pkt":"SKRyNpegILAB4IZiCABFAABONt5AACwReWGJ3VJlwKgBdXM\/5aMAOpGoAAAAAAAAAAAAAAAAAAAAAPN+m\/ILsCXuILfvy5DtB2ECAAAAAwAAAAUAAAAAAAAAAq0="} +02211{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":5,"flow_src_last_pkt_time":1743340103541202,"flow_dst_last_pkt_time":1743340103722729,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1287,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1287,"pkt_l4_len":1253,"thread_ts_usec":1743340103722729,"pkt":"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"} +01110{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":206,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":11,"flow_dst_packets_processed":20,"flow_first_seen":1743340090407216,"flow_src_last_pkt_time":1743340090864144,"flow_dst_last_pkt_time":1743340090894704,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":731,"flow_dst_max_l4_payload_len":29200,"flow_src_tot_l4_payload_len":1257,"flow_dst_tot_l4_payload_len":42824,"midstream":0,"thread_ts_usec":1743340104573778,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"66.40.191.253","src_port":60378,"dst_port":3724,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +01106{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":206,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":9,"flow_first_seen":1743340103372399,"flow_src_last_pkt_time":1743340104347803,"flow_dst_last_pkt_time":1743340104573778,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":81,"flow_dst_max_l4_payload_len":1245,"flow_src_tot_l4_payload_len":468,"flow_dst_tot_l4_payload_len":1834,"midstream":0,"thread_ts_usec":1743340104573778,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"137.221.82.101","src_port":58787,"dst_port":29503,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +01103{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":206,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":10,"flow_dst_packets_processed":9,"flow_first_seen":1743340096015463,"flow_src_last_pkt_time":1743340098487647,"flow_dst_last_pkt_time":1743340098324952,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":40,"flow_src_tot_l4_payload_len":400,"flow_dst_tot_l4_payload_len":360,"midstream":0,"thread_ts_usec":1743340104573778,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"137.221.72.99","src_port":63711,"dst_port":29523,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":160,"client":140,"server":20}}},"confidence": {"6":"DPI"},"proto":"Blizzard","proto_id":"213","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00847{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":206,"source":"cfgs\/default\/pcap\/blizzard.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":206,"packets-processed":206,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":68000,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":9,"total-detection-updates":0,"total-updates":1,"current-active-flows":0,"total-active-flows":9,"total-idle-flows":9,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":79,"global_ts_usec":1743340104573778} +~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ +~~ packets captured/processed: 206/206 +~~ skipped flows.............: 0 +~~ total layer4 data length..: 68000 bytes +~~ total detected protocols..: 9 +~~ total active/idle flows...: 9/9 +~~ total timeout flows.......: 0 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +~~ total memory allocated....: 9232080 bytes +~~ total memory freed........: 9232080 bytes +~~ total allocations/frees...: 150078/150078 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +~~ json message min len.......: 509 chars +~~ json message max len.......: 2216 chars +~~ json message avg len.......: 1346 chars |