diff options
Diffstat (limited to 'test/results/default/lagofast.pcap.out')
| -rw-r--r-- | test/results/default/lagofast.pcap.out | 139 |
1 files changed, 139 insertions, 0 deletions
diff --git a/test/results/default/lagofast.pcap.out b/test/results/default/lagofast.pcap.out new file mode 100644 index 000000000..88a33c24a --- /dev/null +++ b/test/results/default/lagofast.pcap.out @@ -0,0 +1,139 @@ +00613{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"max-flows-per-thread":32768,"max-idle-flows-per-thread":1024,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} +00834{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1740132668398312} +00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668398312,"flow_src_last_pkt_time":1740132668398312,"flow_dst_last_pkt_time":1740132668398312,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668398312,"l3_proto":"ip4","src_ip":"77.134.62.224","dst_ip":"43.83.218.54","src_port":59607,"dst_port":1189,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00580{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1740132668398312,"flow_dst_last_pkt_time":1740132668398312,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132668398312,"pkt":"YIBzeIpShQQBNkgdCABFAABSFUQAAIARk2dNhj7gK1PaNujXBKUAPjfwAG5dAwAw2bff97k4xZrtwcVOWgWVxQnXr9+XTn4rBnxxZ8TGYdPcVFalhGemBATn307eT4F6"} +00926{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668398312,"flow_src_last_pkt_time":1740132668398312,"flow_dst_last_pkt_time":1740132668398312,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668398312,"l3_proto":"ip4","src_ip":"77.134.62.224","dst_ip":"43.83.218.54","src_port":59607,"dst_port":1189,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668583042,"flow_src_last_pkt_time":1740132668583042,"flow_dst_last_pkt_time":1740132668583042,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668583042,"l3_proto":"ip4","src_ip":"46.18.153.127","dst_ip":"228.2.57.157","src_port":59607,"dst_port":10510,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00582{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1740132668583042,"flow_dst_last_pkt_time":1740132668583042,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132668583042,"pkt":"YPLFWf8vPY2RbNwyCABFAABSHEkAAIAROSEuEpl\/5AI5nejXKQ4APgWxAG5dAwAw08uBUnF4t9vOz3h\/TnLbNnykInqR8tnBkyRa9MSRigEsxksadejwVydUVVb1Xh30"} +00927{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668583042,"flow_src_last_pkt_time":1740132668583042,"flow_dst_last_pkt_time":1740132668583042,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668583042,"l3_proto":"ip4","src_ip":"46.18.153.127","dst_ip":"228.2.57.157","src_port":59607,"dst_port":10510,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668801181,"flow_src_last_pkt_time":1740132668801181,"flow_dst_last_pkt_time":1740132668801181,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668801181,"l3_proto":"ip4","src_ip":"25.125.160.55","dst_ip":"55.148.149.242","src_port":59607,"dst_port":1855,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00580{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1740132668801181,"flow_dst_last_pkt_time":1740132668801181,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132668801181,"pkt":"YDJZ7su40sL5UBT9CABFAABSWJUAAIARWssZfaA3N5SV8ujXBz8APvnuAG5dAwAwFvlmBbHP5Lt84P27LRTnhgMYAOj3QP5fUXXXZiLmvZiU9fSaSgdx6BIFqNR6EBBo"} +00928{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668801181,"flow_src_last_pkt_time":1740132668801181,"flow_dst_last_pkt_time":1740132668801181,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668801181,"l3_proto":"ip4","src_ip":"25.125.160.55","dst_ip":"55.148.149.242","src_port":59607,"dst_port":1855,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668863742,"flow_src_last_pkt_time":1740132668863742,"flow_dst_last_pkt_time":1740132668863742,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668863742,"l3_proto":"ip4","src_ip":"0.40.128.100","dst_ip":"172.119.18.180","src_port":59607,"dst_port":2672,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00581{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1740132668863742,"flow_dst_last_pkt_time":1740132668863742,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132668863742,"pkt":"YI69gFqbPNjjhLmdCABFAABSGd8AAIAR4QQAKIBkrHcStOjXCnAAPgEYAG5dAwAw6\/0dBC5RLaenPB3vkPR3GnUxdZZ2HR3RO7CcTgK7QdfHEYhM1ukEawly8ru1YcP5"} +00927{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668863742,"flow_src_last_pkt_time":1740132668863742,"flow_dst_last_pkt_time":1740132668863742,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668863742,"l3_proto":"ip4","src_ip":"0.40.128.100","dst_ip":"172.119.18.180","src_port":59607,"dst_port":2672,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668894862,"flow_src_last_pkt_time":1740132668894862,"flow_dst_last_pkt_time":1740132668894862,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668894862,"l3_proto":"ip4","src_ip":"23.147.144.74","dst_ip":"63.29.27.84","src_port":59607,"dst_port":6198,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00581{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1740132668894862,"flow_dst_last_pkt_time":1740132668894862,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132668894862,"pkt":"YIwwMmdQi8ieh7AFCABFAABS4MsAAIARV4EXk5BKPx0bVOjXGDYAPi0DAG5dAwAwJwoqIayCRK1oAWHiQ34iaYIDkQuMxkcqMzfJFObbSbjBT65xO6MsRr3BrOq+k+p\/"} +00925{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668894862,"flow_src_last_pkt_time":1740132668894862,"flow_dst_last_pkt_time":1740132668894862,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668894862,"l3_proto":"ip4","src_ip":"23.147.144.74","dst_ip":"63.29.27.84","src_port":59607,"dst_port":6198,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668989604,"flow_src_last_pkt_time":1740132668989604,"flow_dst_last_pkt_time":1740132668989604,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668989604,"l3_proto":"ip4","src_ip":"196.228.157.219","dst_ip":"206.16.55.103","src_port":59607,"dst_port":4750,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00581{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1740132668989604,"flow_dst_last_pkt_time":1740132668989604,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132668989604,"pkt":"YCz\/kIpdsof1ujWTCABFAABSWJcAAIAReczE5J3bzhA3Z+jXEo4APrhFAG5dAwAwQOVzf5cT9EM4GTvEVMWwT46b15EzDiCfuMZGwtmsKV9EMBH9sUU5hjzJYLPrGkc+"} +00929{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668989604,"flow_src_last_pkt_time":1740132668989604,"flow_dst_last_pkt_time":1740132668989604,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668989604,"l3_proto":"ip4","src_ip":"196.228.157.219","dst_ip":"206.16.55.103","src_port":59607,"dst_port":4750,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669019339,"flow_src_last_pkt_time":1740132669019339,"flow_dst_last_pkt_time":1740132669019339,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669019339,"l3_proto":"ip4","src_ip":"50.138.250.44","dst_ip":"87.176.151.245","src_port":59607,"dst_port":4477,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00583{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1740132669019339,"flow_dst_last_pkt_time":1740132669019339,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132669019339,"pkt":"YCb8s1ECrwqXmijTCABFAABSEqcAAIARC5gyivosV7CX9ejXEX0APnc\/AG5dAwAweiVcziWgV\/6eogju4F4xeFJLmoAakDyGCalTc\/Bb3ETLJk6DkN7cA7zMTZtuoZiw"} +00928{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669019339,"flow_src_last_pkt_time":1740132669019339,"flow_dst_last_pkt_time":1740132669019339,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669019339,"l3_proto":"ip4","src_ip":"50.138.250.44","dst_ip":"87.176.151.245","src_port":59607,"dst_port":4477,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669019339,"flow_src_last_pkt_time":1740132669019339,"flow_dst_last_pkt_time":1740132669019339,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669019339,"l3_proto":"ip4","src_ip":"57.213.147.123","dst_ip":"56.213.47.40","src_port":59607,"dst_port":4477,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00582{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1740132669019339,"flow_dst_last_pkt_time":1740132669019339,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132669019339,"pkt":"YLH+mqRzpJcY0zuGCABFAABSEqcAAIAR8qY51ZN7ONUvKOjXEX0APl5OAG5dAwAweiVcziWgV\/6eogju4F4xeFJLmoAakDyGCalTc\/Bb3ETLJk6DkN7cA7zMTZtuoZiw"} +00927{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669019339,"flow_src_last_pkt_time":1740132669019339,"flow_dst_last_pkt_time":1740132669019339,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669019339,"l3_proto":"ip4","src_ip":"57.213.147.123","dst_ip":"56.213.47.40","src_port":59607,"dst_port":4477,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669066371,"flow_src_last_pkt_time":1740132669066371,"flow_dst_last_pkt_time":1740132669066371,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669066371,"l3_proto":"ip4","src_ip":"149.210.152.94","dst_ip":"10.63.255.254","src_port":59607,"dst_port":8190,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00584{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1740132669066371,"flow_dst_last_pkt_time":1740132669066371,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132669066371,"pkt":"YE57fK+wzBOtUctsCABFAABSGeEAAIAR6EuV0pheCj\/\/\/ujXH\/4APmv9AG5dAwAwkZjv+9uAtDYM+yn6dhmhCNNWdOmUl6SDF8dYN+vmquyeuFh3IS9yMB6vpPs4zoX1"} +00928{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669066371,"flow_src_last_pkt_time":1740132669066371,"flow_dst_last_pkt_time":1740132669066371,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669066371,"l3_proto":"ip4","src_ip":"149.210.152.94","dst_ip":"10.63.255.254","src_port":59607,"dst_port":8190,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00782{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669066371,"flow_src_last_pkt_time":1740132669066371,"flow_dst_last_pkt_time":1740132669066371,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669066371,"l3_proto":"ip4","src_ip":"38.210.140.253","dst_ip":"248.126.41.103","src_port":59607,"dst_port":8190,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00583{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":1740132669066371,"flow_dst_last_pkt_time":1740132669066371,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132669066371,"pkt":"YGVYTJ5aB94wKQjZCABFAABSGeEAAIARSwUm0oz9+H4pZ+jXH\/4APs62AG5dAwAwkZjv+9uAtDYM+yn6dhmhCNNWdOmUl6SDF8dYN+vmquyeuFh3IS9yMB6vpPs4zoX1"} +00931{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669066371,"flow_src_last_pkt_time":1740132669066371,"flow_dst_last_pkt_time":1740132669066371,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669066371,"l3_proto":"ip4","src_ip":"38.210.140.253","dst_ip":"248.126.41.103","src_port":59607,"dst_port":8190,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669098026,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669098026,"l3_proto":"ip4","src_ip":"212.123.54.116","dst_ip":"245.4.176.194","src_port":59607,"dst_port":6808,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00582{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132669098026,"pkt":"YCpD8tfLLAEQOo9TCABFAABSIEsAAIARaZnUezZ09QSwwujXGpgAPj5lAG5dAwAwvFgupvP1LwakGMAQj1M8IPU3EN6jfYf0lMVjxNpVlevVKmm9w0DXvasHHXUv4AUV"} +00930{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669098026,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669098026,"l3_proto":"ip4","src_ip":"212.123.54.116","dst_ip":"245.4.176.194","src_port":59607,"dst_port":6808,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669098026,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669098026,"l3_proto":"ip4","src_ip":"50.245.97.76","dst_ip":"104.30.90.163","src_port":59607,"dst_port":7864,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00585{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132669098026,"pkt":"YLjJfr\/ei39lrqv8CABFAABSuqUAAIARKPMy9WFMaB5ao+jXHrgAPiGcAG5dAwAwvFgupvP1LwakGMAQj1M8IJuXOUImU7\/53DNO22jv7bhVjWIwLJ5eZ\/h8ErVKVw7f"} +00928{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669098026,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669098026,"l3_proto":"ip4","src_ip":"50.245.97.76","dst_ip":"104.30.90.163","src_port":59607,"dst_port":7864,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00843{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"packets-captured":13,"packets-processed":12,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":648,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":12,"total-detection-updates":0,"total-updates":0,"current-active-flows":12,"total-active-flows":12,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":39,"global_ts_usec":1740133967197295} +00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967197295,"flow_src_last_pkt_time":1740133967197295,"flow_dst_last_pkt_time":1740133967197295,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967197295,"l3_proto":"ip4","src_ip":"216.47.212.93","dst_ip":"26.156.197.59","src_port":49790,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967197295,"flow_dst_last_pkt_time":1740133967197295,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"thread_ts_usec":1740133967197295,"pkt":"rkD43kASmpQZOg3sCABFAABB\/CJAAEARsiTYL9RdGpzFO8J+ADUALWYjQlsBAAABAAAAAAAACWdhYm9vc3RlcgU2ZmFzdANjb20AAAEAAQ=="} +01091{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967197295,"flow_src_last_pkt_time":1740133967197295,"flow_dst_last_pkt_time":1740133967197295,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967197295,"l3_proto":"ip4","src_ip":"216.47.212.93","dst_ip":"26.156.197.59","src_port":49790,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"gabooster.6fast.com","domainame":"gabooster.6fast.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr": []}}} +00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967197424,"flow_src_last_pkt_time":1740133967197424,"flow_dst_last_pkt_time":1740133967197424,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":53,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":53,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":53,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967197424,"l3_proto":"ip4","src_ip":"251.113.201.83","dst_ip":"202.196.158.89","src_port":53,"dst_port":49790,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00583{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967197424,"flow_dst_last_pkt_time":1740133967197424,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"thread_ts_usec":1740133967197424,"pkt":"YN9YKXdt+OF8r21SCABFAABRcWxAALkRIkz7cclTysSeWQA1wn4APd9pQluBgAABAAEAAAAACWdhYm9vc3RlcgU2ZmFzdANjb20AAAEAAcAMAAEAAQAAAHUABC\/7qOE="} +01117{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967197424,"flow_src_last_pkt_time":1740133967197424,"flow_dst_last_pkt_time":1740133967197424,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":53,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":53,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":53,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967197424,"l3_proto":"ip4","src_ip":"251.113.201.83","dst_ip":"202.196.158.89","src_port":53,"dst_port":49790,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"gabooster.6fast.com","domainame":"gabooster.6fast.com","dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr": ["47.251.168.225,ttl=117"]}}} +00783{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967372053,"flow_src_last_pkt_time":1740133967372053,"flow_dst_last_pkt_time":1740133967372053,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967372053,"l3_proto":"ip4","src_ip":"0.230.137.78","dst_ip":"142.141.18.132","src_port":39354,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +01239{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967372053,"flow_dst_last_pkt_time":1740133967372053,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":583,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":583,"pkt_l4_len":549,"thread_ts_usec":1740133967372053,"pkt":"rvUrpLg9Vy7lKSdtCABFAAI59AFAAEAGGXgA5olOjo0ShJm6Abv7TpudMxdr3IAYABB45QAAAQEICoNtYJGxfQ+AFgMBAgABAAH8AwNl+3C9q0E9IxSwF3HfcuhhfXhmFb3sDJTeT+KDi45jmiD51yRnWz02+PpwcHxAujsgSqHRNcXQ7kZr+bxljdebGAAiEwETAhMDwCvALMypwC\/AMMyowAnACsATwBQAnACdAC8ANQEAAZEAAAAYABYAABNnYWJvb3N0ZXIuNmZhc3QuY29tABcAAP8BAAEAAAoACAAGAB0AFwAYAAsAAgEAACMAAAAQAAsACQhodHRwLzEuMQAFAAUBAAAAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAzACYAJAAdACD9PFskaPGPo4Tpy1l1oPygtAn+DqjpLRzpbHxZTlChIQAtAAIBAQArAAUEAwQDAwAVAOkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +01228{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967372053,"flow_src_last_pkt_time":1740133967372053,"flow_dst_last_pkt_time":1740133967372053,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967372053,"l3_proto":"ip4","src_ip":"0.230.137.78","dst_ip":"142.141.18.132","src_port":39354,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"gabooster.6fast.com","domainame":"gabooster.6fast.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1713ht_5b57614c22b0_eca864cca44a","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00786{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967373537,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1428,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1428,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967373537,"l3_proto":"ip4","src_ip":"24.105.33.150","dst_ip":"5.163.124.163","src_port":443,"dst_port":47280,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +02491{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"thread_ts_usec":1740133967373537,"pkt":"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"} +01070{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967373537,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1428,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1428,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967373537,"l3_proto":"ip4","src_ip":"24.105.33.150","dst_ip":"5.163.124.163","src_port":443,"dst_port":47280,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Starcraft","proto_by_ip_id":213,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web","tls": {"version":"TLSv1.3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","ja4":"","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","blocks":0}}} +00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967535810,"flow_src_last_pkt_time":1740133967535810,"flow_dst_last_pkt_time":1740133967535810,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967535810,"l3_proto":"ip4","src_ip":"187.34.30.159","dst_ip":"44.6.46.200","src_port":11381,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967535810,"flow_dst_last_pkt_time":1740133967535810,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"thread_ts_usec":1740133967535810,"pkt":"YJPQ9bSkmRUV93DgCABFAAA+\/E5AAEARCdG7Ih6fLAYuyCx1ADUAKoFzNvMBAAABAAAAAAAAA2NicwhsYWdvZmFzdANjb20AAAEAAQ=="} +01083{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967535810,"flow_src_last_pkt_time":1740133967535810,"flow_dst_last_pkt_time":1740133967535810,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967535810,"l3_proto":"ip4","src_ip":"187.34.30.159","dst_ip":"44.6.46.200","src_port":11381,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"cbs.lagofast.com","domainame":"cbs.lagofast.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr": []}}} +00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967535846,"flow_src_last_pkt_time":1740133967535846,"flow_dst_last_pkt_time":1740133967535846,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967535846,"l3_proto":"ip4","src_ip":"40.105.164.193","dst_ip":"99.193.243.15","src_port":43932,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967535846,"flow_dst_last_pkt_time":1740133967535846,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"thread_ts_usec":1740133967535846,"pkt":"YKET4V+ImaXWSxxVCABFAABB\/E9AAEARGmEoaaTBY8HzD6ucADUALYBjPI4BAAABAAAAAAAABnJlcG9ydAhsYWdvZmFzdANjb20AAAEAAQ=="} +01093{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967535846,"flow_src_last_pkt_time":1740133967535846,"flow_dst_last_pkt_time":1740133967535846,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967535846,"l3_proto":"ip4","src_ip":"40.105.164.193","dst_ip":"99.193.243.15","src_port":43932,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Outlook","proto_by_ip_id":21,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"report.lagofast.com","domainame":"report.lagofast.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr": []}}} +00784{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967885642,"flow_src_last_pkt_time":1740133967885642,"flow_dst_last_pkt_time":1740133967885642,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967885642,"l3_proto":"ip4","src_ip":"180.239.121.250","dst_ip":"23.200.86.51","src_port":44636,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +01228{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967885642,"flow_dst_last_pkt_time":1740133967885642,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"thread_ts_usec":1740133967885642,"pkt":"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"} +01226{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967885642,"flow_src_last_pkt_time":1740133967885642,"flow_dst_last_pkt_time":1740133967885642,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967885642,"l3_proto":"ip4","src_ip":"180.239.121.250","dst_ip":"23.200.86.51","src_port":44636,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"cbs.lagofast.com","domainame":"cbs.lagofast.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1513h2_8daaf6152771_eca864cca44a","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967887645,"flow_src_last_pkt_time":1740133967887645,"flow_dst_last_pkt_time":1740133967887645,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967887645,"l3_proto":"ip4","src_ip":"99.189.94.53","dst_ip":"185.5.215.83","src_port":45702,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +01230{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967887645,"flow_dst_last_pkt_time":1740133967887645,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"thread_ts_usec":1740133967887645,"pkt":"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"} +01229{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967887645,"flow_src_last_pkt_time":1740133967887645,"flow_dst_last_pkt_time":1740133967887645,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967887645,"l3_proto":"ip4","src_ip":"99.189.94.53","dst_ip":"185.5.215.83","src_port":45702,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"report.lagofast.com","domainame":"report.lagofast.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1513h2_8daaf6152771_eca864cca44a","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00788{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967909379,"flow_src_last_pkt_time":1740133967909379,"flow_dst_last_pkt_time":1740133967909379,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1452,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1452,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1452,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967909379,"l3_proto":"ip4","src_ip":"49.118.157.237","dst_ip":"251.114.223.28","src_port":443,"dst_port":44636,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +02495{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967909379,"flow_dst_last_pkt_time":1740133967909379,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"thread_ts_usec":1740133967909379,"pkt":"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"} +01068{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967909379,"flow_src_last_pkt_time":1740133967909379,"flow_dst_last_pkt_time":1740133967909379,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1452,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1452,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1452,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967909379,"l3_proto":"ip4","src_ip":"49.118.157.237","dst_ip":"251.114.223.28","src_port":443,"dst_port":44636,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web","tls": {"version":"TLSv1.3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","ja4":"","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","blocks":0}}} +00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968267511,"flow_src_last_pkt_time":1740133968267511,"flow_dst_last_pkt_time":1740133968267511,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968267511,"l3_proto":"ip4","src_ip":"157.117.212.161","dst_ip":"124.69.119.132","src_port":7725,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_src_last_pkt_time":1740133968267511,"flow_dst_last_pkt_time":1740133968267511,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"thread_ts_usec":1740133968267511,"pkt":"YIqmRONoya0PjGfNCABFAABB\/LpAAEAR2BCdddShfEV3hB4tADUALXNbkjcBAAABAAAAAAAABnN0YXRpYwhsYWdvZmFzdANjb20AAAEAAQ=="} +01093{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968267511,"flow_src_last_pkt_time":1740133968267511,"flow_dst_last_pkt_time":1740133968267511,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968267511,"l3_proto":"ip4","src_ip":"157.117.212.161","dst_ip":"124.69.119.132","src_port":7725,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"static.lagofast.com","domainame":"static.lagofast.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr": []}}} +00782{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968304308,"flow_src_last_pkt_time":1740133968304308,"flow_dst_last_pkt_time":1740133968304308,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968304308,"l3_proto":"ip4","src_ip":"206.184.203.226","dst_ip":"8.106.2.77","src_port":44640,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +01225{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_src_last_pkt_time":1740133968304308,"flow_dst_last_pkt_time":1740133968304308,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"thread_ts_usec":1740133968304308,"pkt":"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"} +01221{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968304308,"flow_src_last_pkt_time":1740133968304308,"flow_dst_last_pkt_time":1740133968304308,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968304308,"l3_proto":"ip4","src_ip":"206.184.203.226","dst_ip":"8.106.2.77","src_port":44640,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"cbs.lagofast.com","domainame":"cbs.lagofast.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1713ht_5b57614c22b0_eca864cca44a","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00786{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968325025,"flow_src_last_pkt_time":1740133968325025,"flow_dst_last_pkt_time":1740133968325025,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968325025,"l3_proto":"ip4","src_ip":"105.60.130.195","dst_ip":"186.249.185.190","src_port":44642,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +01228{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_src_last_pkt_time":1740133968325025,"flow_dst_last_pkt_time":1740133968325025,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"thread_ts_usec":1740133968325025,"pkt":"YLZNwxHC\/9V2X0+sCABFAAIt4bxAAEAG9lZpPILDuvm5vq5iAbt2066D6Bwi71AYABBAigAAFgMBAgABAAH8AwO3VR4ya+w\/JZfDT4tXdR53Cd95zQiNh30DnpAT39G4RCATzGxGX+788c0ZYIDUD6nDuh7NiZMLTSxQizTHnx\/O7gAeEwETAhMDwCvALMypwC\/AMMyowBPAFACcAJ0ALwA1AQABlQAAABUAEwAAEGNicy5sYWdvZmFzdC5jb20AFwAA\/wEAAQAACgAIAAYAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBADMAJgAkAB0AIHI3oX4VFQR1TtITyRKBmyagM+UhT\/V7kEAOVaqaRrgXAC0AAgEBACsABQQDBAMDABUA7QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +01228{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968325025,"flow_src_last_pkt_time":1740133968325025,"flow_dst_last_pkt_time":1740133968325025,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968325025,"l3_proto":"ip4","src_ip":"105.60.130.195","dst_ip":"186.249.185.190","src_port":44642,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"cbs.lagofast.com","domainame":"cbs.lagofast.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1513h2_8daaf6152771_eca864cca44a","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00783{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968328943,"flow_src_last_pkt_time":1740133968328943,"flow_dst_last_pkt_time":1740133968328943,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968328943,"l3_proto":"ip4","src_ip":"172.142.219.219","dst_ip":"5.97.101.77","src_port":44644,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +01227{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_src_last_pkt_time":1740133968328943,"flow_dst_last_pkt_time":1740133968328943,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"thread_ts_usec":1740133968328943,"pkt":"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"} +01225{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968328943,"flow_src_last_pkt_time":1740133968328943,"flow_dst_last_pkt_time":1740133968328943,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968328943,"l3_proto":"ip4","src_ip":"172.142.219.219","dst_ip":"5.97.101.77","src_port":44644,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"cbs.lagofast.com","domainame":"cbs.lagofast.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1513h2_8daaf6152771_eca864cca44a","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00787{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968329664,"flow_src_last_pkt_time":1740133968329664,"flow_dst_last_pkt_time":1740133968329664,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1452,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1452,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1452,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968329664,"l3_proto":"ip4","src_ip":"136.238.7.95","dst_ip":"231.209.192.237","src_port":443,"dst_port":44640,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +02495{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_src_last_pkt_time":1740133968329664,"flow_dst_last_pkt_time":1740133968329664,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"thread_ts_usec":1740133968329664,"pkt":"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"} +01067{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968329664,"flow_src_last_pkt_time":1740133968329664,"flow_dst_last_pkt_time":1740133968329664,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1452,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1452,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1452,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968329664,"l3_proto":"ip4","src_ip":"136.238.7.95","dst_ip":"231.209.192.237","src_port":443,"dst_port":44640,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web","tls": {"version":"TLSv1.3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","ja4":"","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","blocks":0}}} +00784{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968474945,"flow_src_last_pkt_time":1740133968474945,"flow_dst_last_pkt_time":1740133968474945,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968474945,"l3_proto":"ip4","src_ip":"224.201.159.146","dst_ip":"15.33.130.35","src_port":37898,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +01224{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_src_last_pkt_time":1740133968474945,"flow_dst_last_pkt_time":1740133968474945,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"thread_ts_usec":1740133968474945,"pkt":"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"} +01229{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968474945,"flow_src_last_pkt_time":1740133968474945,"flow_dst_last_pkt_time":1740133968474945,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968474945,"l3_proto":"ip4","src_ip":"224.201.159.146","dst_ip":"15.33.130.35","src_port":37898,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"static.lagofast.com","domainame":"static.lagofast.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1713ht_5b57614c22b0_eca864cca44a","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00788{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968495799,"flow_src_last_pkt_time":1740133968495799,"flow_dst_last_pkt_time":1740133968495799,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1452,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1452,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1452,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968495799,"l3_proto":"ip4","src_ip":"226.143.37.182","dst_ip":"70.254.111.101","src_port":443,"dst_port":37898,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +02498{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_src_last_pkt_time":1740133968495799,"flow_dst_last_pkt_time":1740133968495799,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1506,"pkt_l4_len":1472,"thread_ts_usec":1740133968495799,"pkt":"YLUlL7RxgIndqiM0CABFAAXUjypAADcG8FDijyW2Rv5vZQG7lAr2jLW6iA8TwFAQAFO+SAAAFgMDAHoCAAB2AwNfPFESw3aeKEWCh5mFpS3p2lIVp2Ouq4fOyQSWve0TeyBTiUts8kFqVxdiRihIl7anIecjht9CU1A8j019cF14vhMBAAAuACsAAgMEADMAJAAdACAkO0mh3DERrz+tds2lRN2YYR4POBx\/eJ9i3034KkWAYBQDAwABARcDAwAq+f5gb6RAAzxylasUX2MBXbiVenUQH8gzh18uk8GsUgNufpHuFwv8QjwIFwMDC5RUV3FtzrcDmx+KI+Y99DLCfBsnSrrzVU6Zam\/9zPt3jai7tEbHiBZWfvtFCPBAm6y34+t7wbcBSL26t7taBqETQb9fVVXIDFhKD58xG8QG1k02mXITUM0MPGo7TEAxbBNNgc6mtNQSAbpgq45cfTZkQ5tx2j6Iy7qfUoOcoI6mSgpVE3HhkJb5pNhIyyDYUMXvG5aoq6zON6H6R9IvYlI2v\/wD+5ROZlhe1NrDkyVrkmRj\/4yhoz9yeHaTnoAiVphqQ9MvCQSTUepbPxaKE\/n24Tr8TQu+H12BlEk+YpnqmSGc9jrJsECHevIC0vMww2OsojghKdkhHv66AHQ6XzhppthZVfO5uRLsb8u40HOFy50WzngIcQ9t+VDYmY4AReiMN+e+KiYBKVrgccRZqo8T5bhJYNYmJocR7nv4aD5ElCMAmt5wy2DVr7NPtcp3H7kIWlD9Q226N6AxW12Md3ZsTtXddRaaE1WWtcqKdFpXGeohuTCud5po2ct4NhUoTJ3GmWrpEaBMKBXZsaQTc61QfrQayp9MX9O8RSfMomhIVP3QGJ\/dwi3+A9vdNvs+BDqhoWp30rtiTvy02xqQ9FDXcMjf4Aa40HIpjWnJTFV2bXsMnDzr57CfO3DwcsWqVPWwuEgt8CR50iXgzO1zftULNGiHWlMHriuJGY7KcQZx\/apqkbyIG2SHrJhgx8O4gvIxVnOCMX6QTtJDVT5pMAxvgTp\/8HNA8en2nO+fx1k4xpdaT7AZe8ciC9i\/T9h+Ye3l9RgFYkl4AW3uXOdZkCv5jeTZHNs3CaDsrcsYNkAzevO+w1\/XnPJHPKwECm3ShCiNm1qgtE6Z+zASQcG0ki0QxLvLC4UVWDQrCyBp8UtAsUa\/JIBlvbWzpskw2EfdTBydqndZ8RLhYvStdXrhv8\/KqbggQ1BNeOzV2njemMl1V6qCNlgVfpzX+\/d0kfuaT4VooqPQU7h6+QWYJfxmjhQFolQPSNUU5WjHqjYH7rGZ6GUqHG9W2Z+AKvTkTTsD9jf32EpptSiNfXgg3JAfP1oaXxCx58IhPkoQHw12Q+eVMhCug7jmeZ4rfnoBImiZKif5gEdrlonOg7qBGyy9zB1uNAii3PQFSXkmNzjJYVTlZFiBIri3G5Kfk25Zs4cjwoARUMP9oRixh39+2Fjgsjvt3Pz9ZM\/qrBNdmmrYz58Xi4FxmiEjtWjXAsz2RQKR1ymIAvOB1hgjiVI8A4muAaWcqfIwI7UDxsN40ZsxuVeZ5PjW2ETHK0wywzLpr0M8\/SO7L3+b8p8UMXnYrEwCFY1t7+bwKN7wCxqQy\/MuJpHbzDZOQ1jM0M\/96KK\/gJC1mUuxO4\/ilS3CeYMMfGE0FKL5\/9VlRmK5BNQU\/VsT\/7LAmj8fxlnWkLFuEhRdAJAQo1X4h4ocH1o8TDnWIdZ0GA7ZLs8T+HnQGt9eS2Jy\/RVi6Yh+OoeBUj5UeYrirxmD838ZorJcIdtMQkdHbtUXeKZLob50qGOb5XbVSH0j6bQ694wk6qIngaBRPBJZSZtAfFn7GlHADx3Zs\/C2CR\/DYavoX72wUHRuxDJ4\/e\/jUlrn946mjI7GAPq2mu08MDY6LyQadDCZXWoZ2KGe9rmvskM6Rx7URswPS\/wauMoTUXyOR+iN01SAJtzdOg9MiMcYPChpq11fPzlL\/plYke3R7GKwXSVt"} +01068{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968495799,"flow_src_last_pkt_time":1740133968495799,"flow_dst_last_pkt_time":1740133968495799,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1452,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1452,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1452,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968495799,"l3_proto":"ip4","src_ip":"226.143.37.182","dst_ip":"70.254.111.101","src_port":443,"dst_port":37898,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web","tls": {"version":"TLSv1.3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","ja4":"","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","blocks":0}}} +00785{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968502869,"flow_src_last_pkt_time":1740133968502869,"flow_dst_last_pkt_time":1740133968502869,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968502869,"l3_proto":"ip4","src_ip":"236.82.25.211","dst_ip":"237.191.110.161","src_port":45722,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +01225{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_src_last_pkt_time":1740133968502869,"flow_dst_last_pkt_time":1740133968502869,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"thread_ts_usec":1740133968502869,"pkt":"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"} +01233{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968502869,"flow_src_last_pkt_time":1740133968502869,"flow_dst_last_pkt_time":1740133968502869,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968502869,"l3_proto":"ip4","src_ip":"236.82.25.211","dst_ip":"237.191.110.161","src_port":45722,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"report.lagofast.com","domainame":"report.lagofast.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1513h2_8daaf6152771_eca864cca44a","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968504736,"flow_src_last_pkt_time":1740133968504736,"flow_dst_last_pkt_time":1740133968504736,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":64,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":64,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":64,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"109.65.199.230","dst_ip":"9.207.246.240","src_port":37898,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00620{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_src_last_pkt_time":1740133968504736,"flow_dst_last_pkt_time":1740133968504736,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":118,"pkt_l4_len":84,"thread_ts_usec":1740133968504736,"pkt":"3yJgkZ7tzGBKL68+CABFAABobh5AAEAGloptQcfmCc\/28JQKAbuIDxPA9ozDX1AYABMf\/wAAFAMDAAEBFwMDADXyAIx6zdd1fqu\/uw1BwBaazjch3MoKmwwVlTNHbEQBcMJqq3tSojPIi1ZTMWOcAvOkeMBv3w=="} +00918{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968504736,"flow_src_last_pkt_time":1740133968504736,"flow_dst_last_pkt_time":1740133968504736,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":64,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":64,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":64,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"109.65.199.230","dst_ip":"9.207.246.240","src_port":37898,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} +00975{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968474945,"flow_src_last_pkt_time":1740133968474945,"flow_dst_last_pkt_time":1740133968474945,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"224.201.159.146","dst_ip":"15.33.130.35","src_port":37898,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00968{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668801181,"flow_src_last_pkt_time":1740132668801181,"flow_dst_last_pkt_time":1740132668801181,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"25.125.160.55","dst_ip":"55.148.149.242","src_port":59607,"dst_port":1855,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00969{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669098026,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"212.123.54.116","dst_ip":"245.4.176.194","src_port":59607,"dst_port":6808,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00960{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967197295,"flow_src_last_pkt_time":1740133967197295,"flow_dst_last_pkt_time":1740133967197295,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"216.47.212.93","dst_ip":"26.156.197.59","src_port":49790,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} +00974{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967372053,"flow_src_last_pkt_time":1740133967372053,"flow_dst_last_pkt_time":1740133967372053,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"0.230.137.78","dst_ip":"142.141.18.132","src_port":39354,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00967{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668863742,"flow_src_last_pkt_time":1740132668863742,"flow_dst_last_pkt_time":1740132668863742,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"0.40.128.100","dst_ip":"172.119.18.180","src_port":59607,"dst_port":2672,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00960{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967909379,"flow_src_last_pkt_time":1740133967909379,"flow_dst_last_pkt_time":1740133967909379,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1452,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1452,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1452,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"49.118.157.237","dst_ip":"251.114.223.28","src_port":443,"dst_port":44636,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} +00968{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669066371,"flow_src_last_pkt_time":1740132669066371,"flow_dst_last_pkt_time":1740132669066371,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"149.210.152.94","dst_ip":"10.63.255.254","src_port":59607,"dst_port":8190,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00967{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669098026,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"50.245.97.76","dst_ip":"104.30.90.163","src_port":59607,"dst_port":7864,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00974{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968328943,"flow_src_last_pkt_time":1740133968328943,"flow_dst_last_pkt_time":1740133968328943,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"172.142.219.219","dst_ip":"5.97.101.77","src_port":44644,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00960{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968495799,"flow_src_last_pkt_time":1740133968495799,"flow_dst_last_pkt_time":1740133968495799,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1452,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1452,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1452,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"226.143.37.182","dst_ip":"70.254.111.101","src_port":443,"dst_port":37898,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} +00967{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669019339,"flow_src_last_pkt_time":1740132669019339,"flow_dst_last_pkt_time":1740132669019339,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"57.213.147.123","dst_ip":"56.213.47.40","src_port":59607,"dst_port":4477,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00953{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968504736,"flow_src_last_pkt_time":1740133968504736,"flow_dst_last_pkt_time":1740133968504736,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":64,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":64,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":64,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"109.65.199.230","dst_ip":"9.207.246.240","src_port":37898,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} +00967{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668583042,"flow_src_last_pkt_time":1740132668583042,"flow_dst_last_pkt_time":1740132668583042,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"46.18.153.127","dst_ip":"228.2.57.157","src_port":59607,"dst_port":10510,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00965{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668894862,"flow_src_last_pkt_time":1740132668894862,"flow_dst_last_pkt_time":1740132668894862,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"23.147.144.74","dst_ip":"63.29.27.84","src_port":59607,"dst_port":6198,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00968{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669019339,"flow_src_last_pkt_time":1740132669019339,"flow_dst_last_pkt_time":1740132669019339,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"50.138.250.44","dst_ip":"87.176.151.245","src_port":59607,"dst_port":4477,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00962{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967373537,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1428,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1428,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"24.105.33.150","dst_ip":"5.163.124.163","src_port":443,"dst_port":47280,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Starcraft","proto_by_ip_id":213,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} +00966{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668398312,"flow_src_last_pkt_time":1740132668398312,"flow_dst_last_pkt_time":1740132668398312,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"77.134.62.224","dst_ip":"43.83.218.54","src_port":59607,"dst_port":1189,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00976{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968502869,"flow_src_last_pkt_time":1740133968502869,"flow_dst_last_pkt_time":1740133968502869,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"236.82.25.211","dst_ip":"237.191.110.161","src_port":45722,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00973{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968304308,"flow_src_last_pkt_time":1740133968304308,"flow_dst_last_pkt_time":1740133968304308,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"206.184.203.226","dst_ip":"8.106.2.77","src_port":44640,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00958{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967535810,"flow_src_last_pkt_time":1740133967535810,"flow_dst_last_pkt_time":1740133967535810,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"187.34.30.159","dst_ip":"44.6.46.200","src_port":11381,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} +00962{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967535846,"flow_src_last_pkt_time":1740133967535846,"flow_dst_last_pkt_time":1740133967535846,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"40.105.164.193","dst_ip":"99.193.243.15","src_port":43932,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Outlook","proto_by_ip_id":21,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} +00962{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968267511,"flow_src_last_pkt_time":1740133968267511,"flow_dst_last_pkt_time":1740133968267511,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"157.117.212.161","dst_ip":"124.69.119.132","src_port":7725,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} +00970{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669066371,"flow_src_last_pkt_time":1740132669066371,"flow_dst_last_pkt_time":1740132669066371,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"38.210.140.253","dst_ip":"248.126.41.103","src_port":59607,"dst_port":8190,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00977{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968325025,"flow_src_last_pkt_time":1740133968325025,"flow_dst_last_pkt_time":1740133968325025,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"105.60.130.195","dst_ip":"186.249.185.190","src_port":44642,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00975{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967885642,"flow_src_last_pkt_time":1740133967885642,"flow_dst_last_pkt_time":1740133967885642,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"180.239.121.250","dst_ip":"23.200.86.51","src_port":44636,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00959{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968329664,"flow_src_last_pkt_time":1740133968329664,"flow_dst_last_pkt_time":1740133968329664,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1452,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1452,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1452,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"136.238.7.95","dst_ip":"231.209.192.237","src_port":443,"dst_port":44640,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} +00969{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668989604,"flow_src_last_pkt_time":1740132668989604,"flow_dst_last_pkt_time":1740132668989604,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"196.228.157.219","dst_ip":"206.16.55.103","src_port":59607,"dst_port":4750,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00972{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967887645,"flow_src_last_pkt_time":1740133967887645,"flow_dst_last_pkt_time":1740133967887645,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"99.189.94.53","dst_ip":"185.5.215.83","src_port":45702,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} +00999{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967197424,"flow_src_last_pkt_time":1740133967197424,"flow_dst_last_pkt_time":1740133967197424,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":53,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":53,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":53,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"251.113.201.83","dst_ip":"202.196.158.89","src_port":53,"dst_port":49790,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"gabooster.6fast.com"}} +00848{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"packets-captured":30,"packets-processed":30,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":10830,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":30,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":30,"total-idle-flows":30,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":124,"global_ts_usec":1740133968504736} +~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ +~~ packets captured/processed: 30/30 +~~ skipped flows.............: 0 +~~ total layer4 data length..: 10830 bytes +~~ total detected protocols..: 30 +~~ total active/idle flows...: 30/30 +~~ total timeout flows.......: 0 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +~~ total memory allocated....: 8519333 bytes +~~ total memory freed........: 8519333 bytes +~~ total allocations/frees...: 145105/145105 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +~~ json message min len.......: 564 chars +~~ json message max len.......: 2503 chars +~~ json message avg len.......: 1532 chars |