diff options
Diffstat (limited to 'test/results/default/lagofast.pcap.out')
| -rw-r--r-- | test/results/default/lagofast.pcap.out | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/test/results/default/lagofast.pcap.out b/test/results/default/lagofast.pcap.out index 88a33c24a..ae5e35a27 100644 --- a/test/results/default/lagofast.pcap.out +++ b/test/results/default/lagofast.pcap.out @@ -1,5 +1,5 @@ -00613{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"max-flows-per-thread":32768,"max-idle-flows-per-thread":1024,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} -00834{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1740132668398312} +00613{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"max-flows-per-thread":32768,"max-idle-flows-per-thread":1024,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} +00834{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1740132668398312} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668398312,"flow_src_last_pkt_time":1740132668398312,"flow_dst_last_pkt_time":1740132668398312,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668398312,"l3_proto":"ip4","src_ip":"77.134.62.224","dst_ip":"43.83.218.54","src_port":59607,"dst_port":1189,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} 00580{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1740132668398312,"flow_dst_last_pkt_time":1740132668398312,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132668398312,"pkt":"YIBzeIpShQQBNkgdCABFAABSFUQAAIARk2dNhj7gK1PaNujXBKUAPjfwAG5dAwAw2bff97k4xZrtwcVOWgWVxQnXr9+XTn4rBnxxZ8TGYdPcVFalhGemBATn307eT4F6"} 00926{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668398312,"flow_src_last_pkt_time":1740132668398312,"flow_dst_last_pkt_time":1740132668398312,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132668398312,"l3_proto":"ip4","src_ip":"77.134.62.224","dst_ip":"43.83.218.54","src_port":59607,"dst_port":1189,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} @@ -36,7 +36,7 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669098026,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669098026,"l3_proto":"ip4","src_ip":"50.245.97.76","dst_ip":"104.30.90.163","src_port":59607,"dst_port":7864,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} 00585{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1740132669098026,"pkt":"YLjJfr\/ei39lrqv8CABFAABSuqUAAIARKPMy9WFMaB5ao+jXHrgAPiGcAG5dAwAwvFgupvP1LwakGMAQj1M8IJuXOUImU7\/53DNO22jv7bhVjWIwLJ5eZ\/h8ErVKVw7f"} 00928{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669098026,"flow_src_last_pkt_time":1740132669098026,"flow_dst_last_pkt_time":1740132669098026,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740132669098026,"l3_proto":"ip4","src_ip":"50.245.97.76","dst_ip":"104.30.90.163","src_port":59607,"dst_port":7864,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} -00843{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"packets-captured":13,"packets-processed":12,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":648,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":12,"total-detection-updates":0,"total-updates":0,"current-active-flows":12,"total-active-flows":12,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":39,"global_ts_usec":1740133967197295} +00843{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":13,"packets-processed":12,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":648,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":12,"total-detection-updates":0,"total-updates":0,"current-active-flows":12,"total-active-flows":12,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":39,"global_ts_usec":1740133967197295} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967197295,"flow_src_last_pkt_time":1740133967197295,"flow_dst_last_pkt_time":1740133967197295,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967197295,"l3_proto":"ip4","src_ip":"216.47.212.93","dst_ip":"26.156.197.59","src_port":49790,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} 00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967197295,"flow_dst_last_pkt_time":1740133967197295,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"thread_ts_usec":1740133967197295,"pkt":"rkD43kASmpQZOg3sCABFAABB\/CJAAEARsiTYL9RdGpzFO8J+ADUALWYjQlsBAAABAAAAAAAACWdhYm9vc3RlcgU2ZmFzdANjb20AAAEAAQ=="} 01091{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967197295,"flow_src_last_pkt_time":1740133967197295,"flow_dst_last_pkt_time":1740133967197295,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967197295,"l3_proto":"ip4","src_ip":"216.47.212.93","dst_ip":"26.156.197.59","src_port":49790,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"gabooster.6fast.com","domainame":"gabooster.6fast.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr": []}}} @@ -48,7 +48,7 @@ 01228{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967372053,"flow_src_last_pkt_time":1740133967372053,"flow_dst_last_pkt_time":1740133967372053,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967372053,"l3_proto":"ip4","src_ip":"0.230.137.78","dst_ip":"142.141.18.132","src_port":39354,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN","hostname":"gabooster.6fast.com","domainame":"gabooster.6fast.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1713ht_5b57614c22b0_eca864cca44a","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} 00786{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967373537,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1428,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1428,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967373537,"l3_proto":"ip4","src_ip":"24.105.33.150","dst_ip":"5.163.124.163","src_port":443,"dst_port":47280,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} 02491{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":1494,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1494,"pkt_l4_len":1460,"thread_ts_usec":1740133967373537,"pkt":"YBXV3s+VkRJEHAFPCABFAAXIJ60AAPQG3T0YaSGWBaN8owG7uLBRjuTPvOMNaIAQAIN\/hwAAAQEICtamEJzdUytMFgMDAHoCAAB2AwP6ZWIzNJcoYMc\/YHzj8az6p1TpHJ6NR488TM2+V60UiyAdIGIKERurJTNlptIvE4T7W359vc2fh+t9pWVrl3lfsRMBAAAuACsAAgMEADMAJAAdACBkbm6W8sAFy+tqdjwx4lGWnEmJoEeMS7CTWeqR+z9OZRQDAwABARcDAwAqHVZ1QfUdM3iNc0\/xXaGiq\/lZUnpYX5\/SZ3PVByObNlpV06mgS8ZewOmLFwMDEPXd8tOyxk4Y0xY4DNNT+bvkNKqPHg8P9rhndIcjtLEjwu6noNtJpVCaxty26A+SSUhC4JbyRw3egejLSgoi5zWK6G8vRrIf0tnr\/T9Hf6HyW8HMmM0o7zWSRCUB2uvPH1M3i3+mc5AGDBUCm8bgbkyOYgUXpzna+s4YlAPVFF+MPJTsTetpoJyMkSGBHzWsQ7mXQ127GoIA62\/RaF91ZA7F1Y4LPhuhJJNEweEL8cc3Lk26w4qyGv40\/6al1blcNMY2a\/X\/EWjBcWlMqD4xYHCoaNcy5YaTc1X8o36U262ECIrO4ZxjxDRj9\/ispCrzTrp65dY+ntwj8CWr4fj6qd\/gcddmzJBiILxQx7OI5JgEKLppI2mEKczz8MFf\/WmLtK7yQn4ZLC+gASuLoGodYKaxDSfST905fairUCvNGkFYlxm9uwiSz0SGtyKAOoNPpzfLkDjbYxoORmkuZGOQcjnE18OqFqMYSgKwbLqoRNaQ3veFYmqDDNfmVD2I\/3Mhfocz5Gsz7Thx9jouDRaYFTpOCL\/NX+NXyTVF\/yCHyjO+5tuuvOyju8843leh5PVvE94R8j2RIwSuRpsdGfN5MbU4bhy3luQIYHlSbOvXse9LN9E\/6\/5EqnbAWQkQ8rAdOHYlwi2edAm3lXqrHsDyYOXt34Z2slAB41BVKDGhINGSR1Hd8CdFKOHdIOWW52M9w7NVd9qudmo2rCEPXKHszxtLrxkPekcv27pCnMRpzj\/xRV8cAD05Om8mnyDY\/nU9RlaOefkETgVCBZfngUNutwWS69J8MX3lL4yHdV4VRYcAvf4PmBswTbxeo5OZBZOnsxidK5Lvk7ho4ZHO5GMkp9\/3HROsmfY24KA8zfI7XHbFg0+yZEnmkQTFSA\/IR0w4g4jGPDtURBxKQsPyQacA+Rxmg23SoWTog3Zkj\/71974qHoqVQltpEAYhEbLV4qsfBWkR1oGEpSilmzT04kgniKShP9KP0ROA3K3a2pMO5p4M\/TCkR0N79BhwgypAlin0Q0JpN0kN44N629XKt8IOlmNj2aoncikCczg82hN6JN91XCnYyO1psSgQ757KVEBatYWQHZUeVyjhNtVMJR33GwJhk84O8de\/Iun8bLYw6SJfDvwltlHntx4ler6lLMO1jdXcwe4P0aqDCeqZCvsQwdj21+EKHtCtHMQ+YIvvBa6wMMoD+w8Y9Ay0OhvmizCsq8FkXZfsX1UBXe7u+Vy2HYKBJrUFUNQU5mr\/YjFIap2P+LAERWaw9ChpZkufoqezj+tvOZPw\/OjOagzgmARl512fG3DjP6+9gBdQP1Uzu0p6gOUj787knsirRxfKFOzNEADKQibw56ez37LeN5UoYT4ebmfyBislVir58xWqLyeWYMxt57X8F4DmDU\/PTQu2I27+vOdJaKYzH0S22kqeasWBEghhK10+UgYfLq8cWG\/QveQBKdzfIrfiN\/5y+Xiko07R\/IOC5ewbiOjY+7R6e2cUIaXAvXFs\/L3lGV\/cV0gx8Rz5RdEEUxcjGYdzwlMic\/9HkZth9YyCEHywrRNoRycL5rrxEKQlf\/D6mH\/+nzo86ElT5rlinYtIQBm4VQTTc1PTTcIoQ41Zj+5\/PcLiwvuSF9Ydus2uYYQ\/bhN44Ge+uaHqSk13TZaeFqge"} -01070{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967373537,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1428,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1428,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967373537,"l3_proto":"ip4","src_ip":"24.105.33.150","dst_ip":"5.163.124.163","src_port":443,"dst_port":47280,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Starcraft","proto_by_ip_id":213,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web","tls": {"version":"TLSv1.3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","ja4":"","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","blocks":0}}} +01069{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967373537,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1428,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1428,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133967373537,"l3_proto":"ip4","src_ip":"24.105.33.150","dst_ip":"5.163.124.163","src_port":443,"dst_port":47280,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web","tls": {"version":"TLSv1.3","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","ja4":"","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","blocks":0}}} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967535810,"flow_src_last_pkt_time":1740133967535810,"flow_dst_last_pkt_time":1740133967535810,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967535810,"l3_proto":"ip4","src_ip":"187.34.30.159","dst_ip":"44.6.46.200","src_port":11381,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} 00559{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1740133967535810,"flow_dst_last_pkt_time":1740133967535810,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"thread_ts_usec":1740133967535810,"pkt":"YJPQ9bSkmRUV93DgCABFAAA+\/E5AAEARCdG7Ih6fLAYuyCx1ADUAKoFzNvMBAAABAAAAAAAAA2NicwhsYWdvZmFzdANjb20AAAEAAQ=="} 01083{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967535810,"flow_src_last_pkt_time":1740133967535810,"flow_dst_last_pkt_time":1740133967535810,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133967535810,"l3_proto":"ip4","src_ip":"187.34.30.159","dst_ip":"44.6.46.200","src_port":11381,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"cbs.lagofast.com","domainame":"cbs.lagofast.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr": []}}} @@ -107,7 +107,7 @@ 00967{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668583042,"flow_src_last_pkt_time":1740132668583042,"flow_dst_last_pkt_time":1740132668583042,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"46.18.153.127","dst_ip":"228.2.57.157","src_port":59607,"dst_port":10510,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} 00965{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668894862,"flow_src_last_pkt_time":1740132668894862,"flow_dst_last_pkt_time":1740132668894862,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"23.147.144.74","dst_ip":"63.29.27.84","src_port":59607,"dst_port":6198,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} 00968{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132669019339,"flow_src_last_pkt_time":1740132669019339,"flow_dst_last_pkt_time":1740132669019339,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"50.138.250.44","dst_ip":"87.176.151.245","src_port":59607,"dst_port":4477,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} -00962{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967373537,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1428,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1428,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"24.105.33.150","dst_ip":"5.163.124.163","src_port":443,"dst_port":47280,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Starcraft","proto_by_ip_id":213,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} +00961{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967373537,"flow_src_last_pkt_time":1740133967373537,"flow_dst_last_pkt_time":1740133967373537,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":1428,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1428,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"24.105.33.150","dst_ip":"5.163.124.163","src_port":443,"dst_port":47280,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","proto_by_ip":"Blizzard","proto_by_ip_id":213,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} 00966{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668398312,"flow_src_last_pkt_time":1740132668398312,"flow_dst_last_pkt_time":1740132668398312,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"77.134.62.224","dst_ip":"43.83.218.54","src_port":59607,"dst_port":1189,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} 00976{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968502869,"flow_src_last_pkt_time":1740133968502869,"flow_dst_last_pkt_time":1740133968502869,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"236.82.25.211","dst_ip":"237.191.110.161","src_port":45722,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} 00973{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133968304308,"flow_src_last_pkt_time":1740133968304308,"flow_dst_last_pkt_time":1740133968304308,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"206.184.203.226","dst_ip":"8.106.2.77","src_port":44640,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} @@ -121,7 +121,7 @@ 00969{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740132668989604,"flow_src_last_pkt_time":1740132668989604,"flow_dst_last_pkt_time":1740132668989604,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"196.228.157.219","dst_ip":"206.16.55.103","src_port":59607,"dst_port":4750,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"LagoFast","proto_id":"444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} 00972{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967887645,"flow_src_last_pkt_time":1740133967887645,"flow_dst_last_pkt_time":1740133967887645,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":517,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"99.189.94.53","dst_ip":"185.5.215.83","src_port":45702,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.LagoFast","proto_id":"91.444","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Acceptable","category_id":2,"category":"VPN"}} 00999{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1740133967197424,"flow_src_last_pkt_time":1740133967197424,"flow_dst_last_pkt_time":1740133967197424,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":53,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":53,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":53,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1740133968504736,"l3_proto":"ip4","src_ip":"251.113.201.83","dst_ip":"202.196.158.89","src_port":53,"dst_port":49790,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"gabooster.6fast.com"}} -00848{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.13.0-5173-c49d126","ndpi_api_version":11990,"size_per_flow":1400,"packets-captured":30,"packets-processed":30,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":10830,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":30,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":30,"total-idle-flows":30,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":124,"global_ts_usec":1740133968504736} +00848{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":30,"source":"cfgs\/default\/pcap\/lagofast.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":30,"packets-processed":30,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":10830,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":30,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":30,"total-idle-flows":30,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":124,"global_ts_usec":1740133968504736} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 30/30 ~~ skipped flows.............: 0 @@ -130,9 +130,9 @@ ~~ total active/idle flows...: 30/30 ~~ total timeout flows.......: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ total memory allocated....: 8519333 bytes -~~ total memory freed........: 8519333 bytes -~~ total allocations/frees...: 145105/145105 +~~ total memory allocated....: 9300930 bytes +~~ total memory freed........: 9300930 bytes +~~ total allocations/frees...: 150136/150136 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~ json message min len.......: 564 chars ~~ json message max len.......: 2503 chars |