diff options
Diffstat (limited to 'test/results/default/i3d.pcap.out')
| -rw-r--r-- | test/results/default/i3d.pcap.out | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/test/results/default/i3d.pcap.out b/test/results/default/i3d.pcap.out index 403a12720..0ab14b1a6 100644 --- a/test/results/default/i3d.pcap.out +++ b/test/results/default/i3d.pcap.out @@ -2,7 +2,7 @@ 00622{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4361-0db12b13","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1643566147188000} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643566147188000,"flow_src_last_pkt_time":1643566147188000,"flow_dst_last_pkt_time":1643566147188000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643566147188000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":60476,"dst_port":50004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} 00605{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1643566147188000,"flow_dst_last_pkt_time":1643566147188000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"thread_ts_usec":1643566147188000,"pkt":"eJS0JASgYDjgxTWgCABFAABmU1sAAH8R+EzAqAJk1aNXL+w8w1QAUphQAAEARgADz6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA95U="} -01038{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643566147188000,"flow_src_last_pkt_time":1643566147188000,"flow_dst_last_pkt_time":1643566147188000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643566147188000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":60476,"dst_port":50004,"l4_proto":"udp","ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"i3D","proto_id":"301","proto_by_ip":"Discord","proto_by_ip_id":58,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00913{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643566147188000,"flow_src_last_pkt_time":1643566147188000,"flow_dst_last_pkt_time":1643566147188000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643566147188000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":60476,"dst_port":50004,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"i3D","proto_id":"301","proto_by_ip":"Discord","proto_by_ip_id":58,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} 00605{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1643566147188000,"flow_dst_last_pkt_time":1643566147212000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"thread_ts_usec":1643566147212000,"pkt":"YDjgxTWgeJS0JASgCABFAABmT1JAADsRAFbVo1cvwKgCZMNU7DwAUkFJAAIARgADz6g5MC4xODYuMTMyLjEzMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Dw="} 00696{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1643566147224000,"flow_dst_last_pkt_time":1643566147212000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":182,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":182,"pkt_l4_len":148,"thread_ts_usec":1643566147224000,"pkt":"eJS0JASgYDjgxTWgCABFAACoU10AAH8R+AjAqAJk1aNXL+w8w1QAlAApkHiUJQdnxvIAA8+ovt4AAfZr38uFzZsIi8ZCCYTQPXHtOHv0CzWfwBUspYBgwVoFrs7CIolbntTbNC\/JUzHrMPTo+XsMJQLsyF07SXVZB\/s4ty9sKDXZEitaLRpRsI4IOF0cfX+Uc0Uf1VgbctkHIRIB7WkAQW7E9Ft4IwjFcGTVfDpX71058AMMAIA="} 00703{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1643566147248000,"flow_dst_last_pkt_time":1643566147212000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":185,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":185,"pkt_l4_len":151,"thread_ts_usec":1643566147248000,"pkt":"eJS0JASgYDjgxTWgCABFAACrU14AAH8R+ATAqAJk1aNXL+w8w1QAl9LykHiUJgdnyrIAA8+ovt4AAUA1qdRM+p5pr\/oqX0DhEzCeQnh79unVEDHbUO6dzrEHo2ZrwkpnXYNjri9KSft0NfMTwIic7YV89\/hFWxptbKzflgOcvR8B2Shl\/WZiU1Z\/KdIDbewpUyY21lOye5L\/XBpzfqg5wywFSTueNycE9miVE9BmO5SMOudQFQQMAIA="} @@ -10,7 +10,7 @@ 00629{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4361-0db12b13","packets-captured":16,"packets-processed":15,"total-skipped-flows":0,"total-l4-payload-len":2431,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":1,"total-active-flows":1,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":10,"global_ts_usec":1643572927206000} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643572927206000,"flow_src_last_pkt_time":1643572927206000,"flow_dst_last_pkt_time":1643572927206000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643572927206000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":55205,"dst_port":50004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} 00606{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1643572927206000,"flow_dst_last_pkt_time":1643572927206000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"thread_ts_usec":1643572927206000,"pkt":"eJS0JASgYDjgxTWgCABFAABmU0sAAH8R+FzAqAJk1aNXL9elw1QAUhLaAAEARgADz6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkaM="} -01039{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643572927206000,"flow_src_last_pkt_time":1643572927206000,"flow_dst_last_pkt_time":1643572927206000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643572927206000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":55205,"dst_port":50004,"l4_proto":"udp","ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"i3D","proto_id":"301","proto_by_ip":"Discord","proto_by_ip_id":58,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00914{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643572927206000,"flow_src_last_pkt_time":1643572927206000,"flow_dst_last_pkt_time":1643572927206000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643572927206000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":55205,"dst_port":50004,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"i3D","proto_id":"301","proto_by_ip":"Discord","proto_by_ip_id":58,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} 00606{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1643572927206000,"flow_dst_last_pkt_time":1643572927231000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"thread_ts_usec":1643572927231000,"pkt":"YDjgxTWgeJS0JASgCABFAABmdVlAADsR2k7Vo1cvwKgCZMNU16UAUmp3AAIARgADz6g5MC4xODYuMTMyLjEzMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA16U="} 01000{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1643572927237000,"flow_dst_last_pkt_time":1643572927231000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":407,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":407,"pkt_l4_len":373,"thread_ts_usec":1643572927237000,"pkt":"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"} 01004{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1643572927260000,"flow_dst_last_pkt_time":1643572927231000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":406,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":406,"pkt_l4_len":372,"thread_ts_usec":1643572927260000,"pkt":"eJS0JASgYDjgxTWgCABFAAGIU08AAH8R9zbAqAJk1aNXL9elw1QBdHLBkHjAYRrNp\/IAA8+ovt4AAQHk2SbeSru+vmqqbBAlqKnhi8VOiprTRfevAGdGL56u0jSjwF44BlGyfOIsOe9k0bILizQNN9KH2Zs3ouDH7gMA9MStaqggeVFFdLPjTFIOSwvUil8bbIvJDO17475aYHIEDMOMgQstUnNA1RgrYS2\/2kVGl7KJZGY\/L7D3V\/CVrqy8Mdz69R1bcRh4OUlMGYs20rRHySB1Dhuk3gj5oX3QZZFzW5+1AKlyFgaMG20J+gfaDs7fR+LJlT0e6ZIGmglv7IbxFn2ezOoMl1oHeUBvAHNKh2tBHj\/gvzBn3\/p9RQD7uVLnyG8g2NlN1VCjLyvFh8dNYVS+\/1yAqn2zPJoP+JrJzw9WOJbDrEms0RCwLivIgUxmOAjwuWkis3CQGN4xLBnm5cm+kzvuz3uOJtKDlrGmtcqqXSMQb0l4w2rAPaz+w\/ddGa7GkvH8mbylSiRSECJE2x\/+OAYZgA=="} @@ -19,7 +19,7 @@ 00630{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","version":"1.5.0","ndpi_version":"4.9.0-4361-0db12b13","packets-captured":31,"packets-processed":30,"total-skipped-flows":0,"total-l4-payload-len":13434,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":2,"total-detection-updates":0,"total-updates":0,"current-active-flows":1,"total-active-flows":2,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":19,"global_ts_usec":1643574967215000} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643574967215000,"flow_src_last_pkt_time":1643574967215000,"flow_dst_last_pkt_time":1643574967215000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643574967215000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":62620,"dst_port":50004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} 00607{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1643574967215000,"flow_dst_last_pkt_time":1643574967215000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"thread_ts_usec":1643574967215000,"pkt":"eJS0JASgYDjgxTWgCABFAABm4pkAAH8RaQ7AqAJk1aNXL\/Scw1QAUnfBAAEARgADz6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8U="} -01039{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643574967215000,"flow_src_last_pkt_time":1643574967215000,"flow_dst_last_pkt_time":1643574967215000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643574967215000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":62620,"dst_port":50004,"l4_proto":"udp","ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"i3D","proto_id":"301","proto_by_ip":"Discord","proto_by_ip_id":58,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00914{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643574967215000,"flow_src_last_pkt_time":1643574967215000,"flow_dst_last_pkt_time":1643574967215000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643574967215000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":62620,"dst_port":50004,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"i3D","proto_id":"301","proto_by_ip":"Discord","proto_by_ip_id":58,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} 00606{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1643574967215000,"flow_dst_last_pkt_time":1643574967246000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"thread_ts_usec":1643574967246000,"pkt":"YDjgxTWgeJS0JASgCABFAABmqfdAADsRpbDVo1cvwKgCZMNU9JwAUjCJAAIARgADz6g5MC4xODYuMTMyLjEzMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Jw="} 00894{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1643574967251000,"flow_dst_last_pkt_time":1643574967246000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":327,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":327,"pkt_l4_len":293,"thread_ts_usec":1643574967251000,"pkt":"eJS0JASgYDjgxTWgCABFAAE54qIAAH8RaDLAqAJk1aNXL\/Scw1QBJQsjkHhO0SCjy\/IAA8+ovt4AAUYE8DbnY+F2hLA62FYWMsCb6Zmw75rsnbyZ4iy2P5qxgVCDbQD+AZr2MnG94xOKLKbJ6e0gLIrOt3dmrdg5D3ID03QQaLQvXVm8Un1iw5E+eIsb41N6KANtFCt71s0VmZrUkf1LNxnlzJAdbzX3KppLCUDo3KeguYqV6SeAD6JVZlW7ZMkhG0EAAY\/U2qeQ551A5yo9KqYr1vJ6hcYhiN7OcJhvYHrjjp03R9P7x15fPzuP7cBcu2mMmA8wMwrmspxIjzzpSS4lDTqWhAn60sO7wZyuA5SeyDvEi2pMQwrzXDhbtJX+LXgP0MdXCc1lEcV9Ir2iPuS\/2W\/B5\/BliP5f54+DI\/oJiIHRkyOA"} 00905{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1643574967267000,"flow_dst_last_pkt_time":1643574967246000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":334,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":334,"pkt_l4_len":300,"thread_ts_usec":1643574967267000,"pkt":"eJS0JASgYDjgxTWgCABFAAFA4qMAAH8RaCrAqAJk1aNXL\/Scw1QBLCuukHhO0iCjz7IAA8+ovt4AAZ3gzmJK4PwiGBsP6yrQWXEYU8mOJo4kT46RqKtbtAa1jFfGR+1n9iFcwSPai84hxwA1dDkEus5ikjeXqxR8ei4Rka6d6FeDekLdJu4lAQK4Wara64p6Nnizb37fxMLGTapmomCtYDASUiiGeqF9t4NKsFS52w84GzcBmmUL5i2JocOYnugTB01asJwlK3oBtKZPD45zJ2sjzj9G+\/2dfkqVo9YHfbsagnekMrsF15itdRhpv0RNadGn8moGwO8lSqqqzkpL9ej9UHpX8yG2NPYbvCKmFtBJ\/6Tk2EdM4j5Oc\/xoFCK6z6xsJfi1LBy0iHe\/V01Wc2lEZG1PBjE9FLx\/zqoriDI1dY6zU4biYN+10pMjgA=="} @@ -27,7 +27,7 @@ 00961{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":46,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":1,"flow_first_seen":1643572927206000,"flow_src_last_pkt_time":1643572927312000,"flow_dst_last_pkt_time":1643572927231000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":60,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1167,"flow_dst_max_l4_payload_len":74,"flow_src_tot_l4_payload_len":10929,"flow_dst_tot_l4_payload_len":74,"midstream":0,"thread_ts_usec":1643574967460000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":55205,"dst_port":50004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"i3D","proto_id":"301","proto_by_ip":"Discord","proto_by_ip_id":58,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643575387216000,"flow_src_last_pkt_time":1643575387216000,"flow_dst_last_pkt_time":1643575387216000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643575387216000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":62461,"dst_port":50004,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} 00607{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1643575387216000,"flow_dst_last_pkt_time":1643575387216000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"thread_ts_usec":1643575387216000,"pkt":"eJS0JASgYDjgxTWgCABFAABm+ssAAH8RUNzAqAJk1aNXL\/P9w1QAUnF1AAEARgADz6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrA="} -01039{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643575387216000,"flow_src_last_pkt_time":1643575387216000,"flow_dst_last_pkt_time":1643575387216000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643575387216000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":62461,"dst_port":50004,"l4_proto":"udp","ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"i3D","proto_id":"301","proto_by_ip":"Discord","proto_by_ip_id":58,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} +00914{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643575387216000,"flow_src_last_pkt_time":1643575387216000,"flow_dst_last_pkt_time":1643575387216000,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":74,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":74,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":74,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643575387216000,"l3_proto":"ip4","src_ip":"192.168.2.100","dst_ip":"213.163.87.47","src_port":62461,"dst_port":50004,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"i3D","proto_id":"301","proto_by_ip":"Discord","proto_by_ip_id":58,"encrypted":0,"breed":"Fun","category_id":8,"category":"Game"}} 00608{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1643575387216000,"flow_dst_last_pkt_time":1643575387247000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":116,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":116,"pkt_l4_len":82,"thread_ts_usec":1643575387247000,"pkt":"YDjgxTWgeJS0JASgCABFAABmnUdAADsRsmDVo1cvwKgCZMNU8\/0AUjHHAAIARgADz6g5MC4xODYuMTMyLjEzMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8\/0="} 02167{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1643575387252000,"flow_dst_last_pkt_time":1643575387247000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1257,"pkt_l4_len":1223,"thread_ts_usec":1643575387252000,"pkt":"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"} 02161{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"cfgs\/default\/pcap\/i3d.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_src_last_pkt_time":1643575387253000,"flow_dst_last_pkt_time":1643575387247000,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1257,"pkt_l4_len":1223,"thread_ts_usec":1643575387253000,"pkt":"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"} @@ -49,4 +49,4 @@ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~ json string min len.......: 564 chars ~~ json string max len.......: 2172 chars -~~ json string avg len.......: 1359 chars +~~ json string avg len.......: 1358 chars |