diff options
Diffstat (limited to 'test/results/default/rockstar_games.pcapng.out')
| -rw-r--r-- | test/results/default/rockstar_games.pcapng.out | 56 |
1 files changed, 56 insertions, 0 deletions
diff --git a/test/results/default/rockstar_games.pcapng.out b/test/results/default/rockstar_games.pcapng.out new file mode 100644 index 000000000..913e6d1f2 --- /dev/null +++ b/test/results/default/rockstar_games.pcapng.out @@ -0,0 +1,56 @@ +00621{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"max-flows-per-thread":32768,"max-idle-flows-per-thread":1024,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":7560000000,"max-packets-per-flow-to-send":5,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} +00842{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":1,"packets-processed":0,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":2,"global_ts_usec":1745233283504613} +00783{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1745233283504613,"flow_src_last_pkt_time":1745233283504613,"flow_dst_last_pkt_time":1745233283504613,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1745233283504613,"l3_proto":"ip4","src_ip":"192.168.1.23","dst_ip":"92.123.164.188","src_port":50624,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1745233283504613,"flow_dst_last_pkt_time":1745233283504613,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1745233283504613,"pkt":"WJz8EPJuaFRakVvWCABFAAA01J5AAIAGAADAqAEXXHukvMXAAbsuz36OAAAAAIAC\/\/\/DHQAAAgQFtAEDAwgBAQQC"} +00549{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1745233283504613,"flow_dst_last_pkt_time":1745233283547302,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1745233283547302,"pkt":"aFRakVvWWJz8EPJuCABFAAA0AABAADYGgc1ce6S8wKgBFwG7xcBQBkbVLs9+j4AS+vCldwAAAgQFoAEBBAIBAwMH"} +00534{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1745233283547498,"flow_dst_last_pkt_time":1745233283547302,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1745233283547498,"pkt":"WJz8EPJuaFRakVvWCABFAAAo1J9AAIAGAADAqAEXXHukvMXAAbsuz36PUAZG1lAQAP\/DEQAA"} +01165{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":4,"flow_src_last_pkt_time":1745233283553282,"flow_dst_last_pkt_time":1745233283547302,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":517,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":517,"pkt_l4_len":483,"thread_ts_usec":1745233283553282,"pkt":"WJz8EPJuaFRakVvWCABFAAH31KBAAIAGAADAqAEXXHukvMXAAbsuz36PUAZG1lAYAP\/E4AAAFgMBAcoBAAHGAwPpfpHYB\/eyLcImX2eudyqLSj1GLdoa0yWQ9PvEBPfuJCCgBWg6yiw62nYlGmwS\/ko9WLFZfSmIi0snWciwnxHjHQAoEwITAcAswCvAMMAvwCTAI8AowCfACsAJwBTAEwCdAJwAPQA8ADUALwEAAVUAAAAkACIAAB9nYW1lZG93bmxvYWRzLnJvY2tzdGFyZ2FtZXMuY29tAAUABQEAAAAAACsABQQDBAMDAA0AGgAYCAQIBQgGBAEFAQIBBAMFAwIDAgIGAQYDACMAAAAKAAgABgAdABcAGAALAAIBAAAzANAAzgAdACBmNnFzFTJgSwui5RlomVzx6+WIqFDQEthRTeXfSUTOCQAXAEEEy2XNLttanO6j9\/gdAyWuvoskZdDRbkEoB8ArdAbu1OJ6WDZ9ZOtSe2cE\/jPLY\/dFp5jybWdVAKDFuDUlAUn7ZAAYAGEEayXeYX77sfP9pmqMkdLIYYAiNEIIqZ5x1S9HmNc5jqW4\/ZAG0\/LDo8FHKPl4BVcdAZHp7dSlltIqFJAWtXJFejyPIAm4R5uxxXm6kU5BDz9zeXog4MQVu8QeB6zSts18ADEAAAAXAAD\/AQABAAAtAAIBAQ=="} +01360{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1745233283504613,"flow_src_last_pkt_time":1745233283553282,"flow_dst_last_pkt_time":1745233283547302,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":463,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":463,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1745233283553282,"l3_proto":"ip4","src_ip":"192.168.1.23","dst_ip":"92.123.164.188","src_port":50624,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}}},"confidence": {"6":"DPI"},"proto":"TLS.RockstarGames","proto_id":"91.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game","hostname":"gamedownloads.rockstargames.com","domainame":"gamedownloads.rockstargames.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d201200_2b729b4bf6f3_e24568c0d440","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":5,"flow_src_last_pkt_time":1745233283553282,"flow_dst_last_pkt_time":1745233283595683,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1745233283595683,"pkt":"aFRakVvWWJz8EPJuCABFAAAoTO9AADYGNOpce6S8wKgBFwG7xcBQBkbWLs+AXlAQAfXdYgAAAAAAAAAA"} +01420{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1745233283504613,"flow_src_last_pkt_time":1745233283553282,"flow_dst_last_pkt_time":1745233283597276,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":463,"flow_dst_max_l4_payload_len":2880,"flow_src_tot_l4_payload_len":463,"flow_dst_tot_l4_payload_len":2880,"midstream":0,"thread_ts_usec":1745233283597276,"l3_proto":"ip4","src_ip":"192.168.1.23","dst_ip":"92.123.164.188","src_port":50624,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}}},"confidence": {"6":"DPI"},"proto":"TLS.RockstarGames","proto_id":"91.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game","hostname":"gamedownloads.rockstargames.com","domainame":"gamedownloads.rockstargames.com","tls": {"version":"TLSv1.2","ja3s":"15c4d139d9f284ce5a6e4380e77c1f5c","ja4":"t13d201200_2b729b4bf6f3_e24568c0d440","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","tls_supported_versions":"TLSv1.3,TLSv1.2","blocks":0}}} +00846{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":7,"packets-processed":6,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":3343,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":1,"total-updates":0,"current-active-flows":1,"total-active-flows":1,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":11,"global_ts_usec":1745308933771485} +00783{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1745308933771485,"flow_src_last_pkt_time":1745308933771485,"flow_dst_last_pkt_time":1745308933771485,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1745308933771485,"l3_proto":"ip4","src_ip":"192.168.1.27","dst_ip":"104.255.105.53","src_port":64057,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00551{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1745308933771485,"flow_dst_last_pkt_time":1745308933771485,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1745308933771485,"pkt":"WJz8EPJuaFRakVvWCABFAAA09y1AAIAGAADAqAEbaP9pNfo5AbvrwuNFAAAAAIAC\/\/+UHgAAAgQFtAEDAwgBAQQC"} +00546{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1745308933771485,"flow_dst_last_pkt_time":1745308933912618,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1745308933912618,"pkt":"aFRakVvWWJz8EPJuCABFAAAw6n5AAO4GDlFo\/2k1wKgBGwG7+jm8znTT68LjRnASEODiqwAAAgQFoAQCAAA="} +00535{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1745308933912860,"flow_dst_last_pkt_time":1745308933912618,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1745308933912860,"pkt":"WJz8EPJuaFRakVvWCABFAAAo9y5AAIAGAADAqAEbaP9pNfo5AbvrwuNGvM501FAQ\/\/+UEgAA"} +01233{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":4,"flow_src_last_pkt_time":1745308933913373,"flow_dst_last_pkt_time":1745308933912618,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"thread_ts_usec":1745308933913373,"pkt":"WJz8EPJuaFRakVvWCABFAAIt9y9AAIAGAADAqAEbaP9pNfo5AbvrwuNGvM501FAY\/\/+WFwAAFgMBAgABAAH8AwOotYZZEGmL\/yLsQmwhbfMhAHsJTWYJTIJY00KNTWjxMiAiGKSyd10ZlgvgQPrfpcAdBsvVcxbIRgmtKxujrjUQLwAg+voTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUBAAGTKioAAAAAABoAGAAAFXJnbC5yb2Nrc3RhcmdhbWVzLmNvbQAXAAD\/AQABAAAKAAoACIqKAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAADMAKwApiooAAQAAHQAglcO2EFKlkMaxWOIlfJcsN52U9clIVI1qUUvnqpryqVUALQACAQEAKwAHBurqAwQDAwAbAAMCAAJEaQAFAAMCaDKamgABAAAVAMIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} +01246{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1745308933771485,"flow_src_last_pkt_time":1745308933913373,"flow_dst_last_pkt_time":1745308933912618,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1745308933913373,"l3_proto":"ip4","src_ip":"192.168.1.27","dst_ip":"104.255.105.53","src_port":64057,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.RockstarGames","proto_id":"91.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game","hostname":"rgl.rockstargames.com","domainame":"rgl.rockstargames.com","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1516h2_8daaf6152771_e5627efa2ab1","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2","blocks":0}}} +00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":2,"flow_packet_id":5,"flow_src_last_pkt_time":1745308933913373,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1745308934032523,"pkt":"aFRakVvWWJz8EPJuCABFAAAo6ypAAO4GDa1o\/2k1wKgBGwG7+jm8znTU68LlS1AQEuUKUQAAAAAAAAAA"} +01304{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1745308933771485,"flow_src_last_pkt_time":1745308933913373,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":147,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":147,"midstream":0,"thread_ts_usec":1745308934032523,"l3_proto":"ip4","src_ip":"192.168.1.27","dst_ip":"104.255.105.53","src_port":64057,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.RockstarGames","proto_id":"91.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game","hostname":"rgl.rockstargames.com","domainame":"rgl.rockstargames.com","tls": {"version":"TLSv1.2","ja3s":"76c691f46143bf86e2d1bb73c6187767","ja4":"t13d1516h2_8daaf6152771_e5627efa2ab1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2","blocks":0}}} +00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1745308934032523,"flow_src_last_pkt_time":1745308934032523,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1745308934032523,"l3_proto":"ip4","src_ip":"192.168.1.23","dst_ip":"23.38.18.80","src_port":50630,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5} +00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1745308934032523,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1745308934032523,"pkt":"WJz8EPJuaFRakVvWCABFAAA0qjhAAIAGAADAqAEXFyYSUMXGAbtD3F3qAAAAAIAC\/\/\/rWwAAAgQFtAEDAwgBAQQC"} +00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1745308934032523,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1745308934032523,"pkt":"aFRakVvWWJz8EPJuCABFAAA0AABAADYGWY8XJhJQwKgBFwG7xcax2JybQ9xd64AS+vDRMQAAAgQFoAEBBAIBAwMH"} +00535{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1745308934032523,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1745308934032523,"pkt":"WJz8EPJuaFRakVvWCABFAAAoqj1AAIAGAADAqAEXFyYSUMXGAbtD3F3rsdicnFAQAP\/rTwAA"} +01230{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":4,"flow_src_last_pkt_time":1745308934032523,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":571,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":571,"pkt_l4_len":537,"thread_ts_usec":1745308934032523,"pkt":"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"} +01217{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1745308934032523,"flow_src_last_pkt_time":1745308934032523,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1745308934032523,"l3_proto":"ip4","src_ip":"192.168.1.23","dst_ip":"23.38.18.80","src_port":50630,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.RockstarGames","proto_id":"91.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game","hostname":"s.rsg.sc","domainame":"s.rsg.sc","tls": {"version":"TLSv1.2","ja3s":"","ja4":"t13d1516h2_8daaf6152771_e5627efa2ab1","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","advertised_alpns":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2","blocks":0}}} +00542{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":3,"flow_packet_id":5,"flow_src_last_pkt_time":1745308934032523,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"pkt_datalink":1,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1745308934032523,"pkt":"aFRakVvWWJz8EPJuCABFAAAoEIJAADYGSRkXJhJQwKgBFwG7xcax2JycQ9xf8FAQAfUI5wAAAAAAAAAA"} +01300{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1745308934032523,"flow_src_last_pkt_time":1745308934032523,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1745308934032523,"l3_proto":"ip4","src_ip":"192.168.1.23","dst_ip":"23.38.18.80","src_port":50630,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.RockstarGames","proto_id":"91.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game","hostname":"s.rsg.sc","domainame":"s.rsg.sc","tls": {"version":"TLSv1.2","ja3s":"35af4c8cd9495354f7d701ce8ad7fd2d","ja4":"t13d1516h2_8daaf6152771_e5627efa2ab1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","advertised_alpns":"h2,http\/1.1","negotiated_alpn":"h2","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2","blocks":0}}} +01120{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1745233283504613,"flow_src_last_pkt_time":1745233283553282,"flow_dst_last_pkt_time":1745233283597276,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":463,"flow_dst_max_l4_payload_len":2880,"flow_src_tot_l4_payload_len":463,"flow_dst_tot_l4_payload_len":2880,"midstream":0,"thread_ts_usec":1745308934032523,"l3_proto":"ip4","src_ip":"192.168.1.23","dst_ip":"92.123.164.188","src_port":50624,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}}},"confidence": {"6":"DPI"},"proto":"TLS.RockstarGames","proto_id":"91.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game"}} +00849{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":19,"packets-processed":18,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":5964,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":3,"total-detection-updates":3,"total-updates":0,"current-active-flows":2,"total-active-flows":3,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":29,"global_ts_usec":1745848676334001} +00791{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1745848676334001,"flow_src_last_pkt_time":1745848676334001,"flow_dst_last_pkt_time":1745848676334001,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":133,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":133,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":133,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1745848676334001,"l3_proto":"ip4","src_ip":"192.168.1.42","dst_ip":"192.81.241.191","src_port":59487,"dst_port":61457,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00703{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1745848676334001,"flow_dst_last_pkt_time":1745848676334001,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":175,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":175,"pkt_l4_len":141,"thread_ts_usec":1745848676334001,"pkt":"WJz8EPJuaFRakVvWCABFAAChfQkAAIARAADAqAEqwFHxv+hf8BEAjXSCFv7\/AAAAAAAAAAAAeAEAAGwAAAAAAAAAbP7\/A1nm8Tht4zqcZXAZzL8fTuGXeTeU243L2hIPhYK\/KTcAAAAQwArACcAUwBMAOQAzADUALwEAADIADQAUABIGAwUDBAMCAwgHBgEFAQQBAgEACwACAQAACgAMAAoAGQAYABcAHQAVABcAAA=="} +01325{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1745848676334001,"flow_src_last_pkt_time":1745848676334001,"flow_dst_last_pkt_time":1745848676334001,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":133,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":133,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":133,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1745848676334001,"l3_proto":"ip4","src_ip":"192.168.1.42","dst_ip":"192.81.241.191","src_port":59487,"dst_port":61457,"l4_proto":"udp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}},"24": {"risk":"Missing SNI TLS Extn","severity":"Medium","risk_score": {"total":300,"client":210,"server":90}}},"confidence": {"6":"DPI"},"proto":"DTLS","proto_id":"30","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Safe","category_id":5,"category":"Web","tls": {"version":"DTLSv1.0","ja3s":"","ja4":"dd1d080400_051fb07a0855_133c09cafeba","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","blocks":0}}} +00605{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1745848676334001,"flow_dst_last_pkt_time":1745848676451107,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":102,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":102,"pkt_l4_len":68,"thread_ts_usec":1745848676451107,"pkt":"aFRakVvWWJz8EPJuCABFAABYGgQAAHQRuK3AUfG\/wKgBKvAR6F8AROM7Fv7\/AAAAAAAAAAAALwMAACMAAAAAAAAAI\/7\/IMlABW\/W7iiWcAyQ\/DjzTjqiMgSzsN7xZn2wAOxWxM+7"} +00745{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1745848676451258,"flow_dst_last_pkt_time":1745848676451107,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":207,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":207,"pkt_l4_len":173,"thread_ts_usec":1745848676451258,"pkt":"WJz8EPJuaFRakVvWCABFAADBfQoAAIARAADAqAEqwFHxv+hf8BEArXSiFv7\/AAAAAAAAAAEAmAEAAIwAAQAAAAAAjP7\/A1nm8Tht4zqcZXAZzL8fTuGXeTeU243L2hIPhYK\/KTcAIMlABW\/W7iiWcAyQ\/DjzTjqiMgSzsN7xZn2wAOxWxM+7ABDACsAJwBTAEwA5ADMANQAvAQAAMgANABQAEgYDBQMEAwIDCAcGAQUBBAECAQALAAIBAAAKAAwACgAZABgAFwAdABUAFwAA"} +01643{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":4,"flow_src_last_pkt_time":1745848676451258,"flow_dst_last_pkt_time":1745848676744991,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":867,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":867,"pkt_l4_len":833,"thread_ts_usec":1745848676744991,"pkt":"aFRakVvWWJz8EPJuCABFAANVGgUAAHQRta\/AUfG\/wKgBKvAR6F8DQcTGFv7\/AAAAAAAAAAEAMgIAACYAAQAAAAAAJv7\/X+f82KenWIUVTVczBw2zkSAe2YC2DZsPR\/L03EC9urcAADUAFv7\/AAAAAAAAAAIC1AsAAsgAAgAAAAACyAACxQACwjCCAr4wggGmAgkA3\/IIOdDHPtUwDQYJKoZIhvcNAQEFBQAwDTELMAkGA1UEBhMCVVMwHhcNMTQwOTEyMjEzMTE5WhcNMzcwMjE1MjEzMTE5WjA1MQswCQYDVQQGEwJVUzEmMCQGA1UEAwwdKi5yZWxheS5yb3Mucm9ja3N0YXJnYW1lcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbKLr0+0\/DzZUkhdQPAIUSf6vOnkd3vz7LMzwfaRy4xYymZYxZ\/q5Ed6EaW6JqCZ\/oLLe25NsTXHmZDJ9bcDe9YOclIL+6LY6GeN4pfa6Hz+jx2zbKLHveils\/9ARmlq7hem2J4bSrsrAmxBAUMu5I64ihzl5jm9DYyKyUFW51pWgePj0eF8P9dMIaB69GlwcMK1R94D2eXFYtOo55DIY4k+tZnErrkNmE6s9MT8hstIKuhDP9Q4XPojoGCcUNCKm6tzoPU2WN3aKCtbekibukMkhDb6jPcXz5o9twDMuJ3vVS\/f9U54Gdx5927EWXG44Ptt7M7QKZ1DQXEVYwHoBAgMBAAEwDQYJKoZIhvcNAQEFBQADggEBAGsDUuhvkBDEsohQGctVpkQYC+VB2RYrWcOG\/BuAnJAchnyGe0vUHkNpCOa1W7QJTxyQmEZgVIJXyBvl2SlD8vRwY8YZYq5ScMlHbwx6IOdYiakctDm6\/hphAz0AMeZ9ER6pMQ1b0SbrLR4SfATQmDBiycNsSO9IQH\/tWD+h7XnpYN3d6I\/deTbmPTX+BS4Ni+JKX\/\/0TDJl1LB3dzdPXVthq9rivdIMTX6GB4FfVrCPzwTueYvVVKiMK1NeQNIsIbiOhX5\/j2p5slNKg8\/0rIFgR1N+GWp975Q9KJiE\/k45+fuMu2uWIiauD7DpNeE9cFNSPZZkeJxPz8ZTFCj+\/Y4W\/v8AAAAAAAAAAwAMDgAAAAADAAAAAAAA"} +01642{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":2,"flow_first_seen":1745848676334001,"flow_src_last_pkt_time":1745848676451258,"flow_dst_last_pkt_time":1745848676744991,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":133,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":165,"flow_dst_max_l4_payload_len":825,"flow_src_tot_l4_payload_len":298,"flow_dst_tot_l4_payload_len":885,"midstream":0,"thread_ts_usec":1745848676744991,"l3_proto":"ip4","src_ip":"192.168.1.42","dst_ip":"192.81.241.191","src_port":59487,"dst_port":61457,"l4_proto":"udp","ndpi": {"flow_risk": {"8": {"risk":"Weak TLS Cipher","severity":"High","risk_score": {"total":150,"client":135,"server":15}},"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}},"24": {"risk":"Missing SNI TLS Extn","severity":"Medium","risk_score": {"total":300,"client":210,"server":90}}},"confidence": {"6":"DPI"},"proto":"DTLS.RockstarGames","proto_id":"30.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game","tls": {"version":"DTLSv1.0","ja3s":"749bd1edea60396ffaa65213b7971718","ja4":"dd1d080400_051fb07a0855_133c09cafeba","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US","subjectDN":"C=US, CN=*.relay.ros.rockstargames.com","fingerprint":"AB:59:0E:11:EC:94:4D:D5:D3:40:7E:6E:3B:8B:6A:19:CA:B7:85:2C","blocks":0}}} +00904{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":4,"flow_packet_id":5,"flow_src_last_pkt_time":1745848676745284,"flow_dst_last_pkt_time":1745848676744991,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":325,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":325,"pkt_l4_len":291,"thread_ts_usec":1745848676745284,"pkt":"WJz8EPJuaFRakVvWCABFAAE3fQsAAIARAADAqAEqwFHxv+hf8BEBI3UYFv7\/AAAAAAAAAAIBDhAAAQIAAgAAAAABAgEAChi22ooDJ66FUVtMNnmXYs59luPtXEe+8vYgb\/IueVThQH9JpSD8uhs6Fqy15X9eqqBNBTRskLe9vogA3zFMMl0V2vkdgVJEwIpXoTcg9cbJcqGT2IfnLy2NvPnaH1ltVgbiq9Utl1qwMex5d7ZhSgUuV5BGJyXYWVrvzvb+clQbHxfKqbBIxCg0rizoii5Ln1QmTam+h+qFpmfynQcTg+lxVgUQAL9JoRAVBQmtS4FLmGE9FEbmcXsUOHVDKeQsUNFdHp9GeCivkE7NTAYNrJe5v79Lrdq+yy1bj4PSeaaibuCZJD\/+BqR7iMmN8EbQR6NvmhoUM\/IIVTlTLOVtpg=="} +00981{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1745308934032523,"flow_src_last_pkt_time":1745308934032523,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1745848676863735,"l3_proto":"ip4","src_ip":"192.168.1.23","dst_ip":"23.38.18.80","src_port":50630,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.RockstarGames","proto_id":"91.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game"}} +00982{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1745308933771485,"flow_src_last_pkt_time":1745308933913373,"flow_dst_last_pkt_time":1745308934032523,"flow_idle_time":7580000000,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":147,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":147,"midstream":0,"thread_ts_usec":1745848676863735,"l3_proto":"ip4","src_ip":"192.168.1.27","dst_ip":"104.255.105.53","src_port":64057,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.RockstarGames","proto_id":"91.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game"}} +01339{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":3,"flow_first_seen":1745848676334001,"flow_src_last_pkt_time":1745848676745402,"flow_dst_last_pkt_time":1745848676863735,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":91,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":283,"flow_dst_max_l4_payload_len":825,"flow_src_tot_l4_payload_len":672,"flow_dst_tot_l4_payload_len":976,"midstream":0,"thread_ts_usec":1745848676863735,"l3_proto":"ip4","src_ip":"192.168.1.42","dst_ip":"192.81.241.191","src_port":59487,"dst_port":61457,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"8": {"risk":"Weak TLS Cipher","severity":"High","risk_score": {"total":150,"client":135,"server":15}},"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":460,"client":410,"server":50}},"24": {"risk":"Missing SNI TLS Extn","severity":"Medium","risk_score": {"total":300,"client":210,"server":90}}},"confidence": {"6":"DPI"},"proto":"DTLS.RockstarGames","proto_id":"30.449","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":1,"breed":"Fun","category_id":8,"category":"Game"}} +00851{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":25,"source":"cfgs\/default\/pcap\/rockstar_games.pcapng","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.15.0-5258-f8869cd","ndpi_api_version":12317,"size_per_flow":1384,"packets-captured":25,"packets-processed":25,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":7612,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":4,"total-detection-updates":4,"total-updates":0,"current-active-flows":0,"total-active-flows":4,"total-idle-flows":4,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":41,"global_ts_usec":1745848676863735} +~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ +~~ packets captured/processed: 25/25 +~~ skipped flows.............: 0 +~~ total layer4 data length..: 7612 bytes +~~ total detected protocols..: 4 +~~ total active/idle flows...: 4/4 +~~ total timeout flows.......: 0 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +~~ total memory allocated....: 9228124 bytes +~~ total memory freed........: 9228124 bytes +~~ total allocations/frees...: 149852/149852 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +~~ json message min len.......: 539 chars +~~ json message max len.......: 1648 chars +~~ json message avg len.......: 1092 chars |