diff options
Diffstat (limited to 'test/results/default/snmp.pcap.out')
| -rw-r--r-- | test/results/default/snmp.pcap.out | 38 |
1 files changed, 19 insertions, 19 deletions
diff --git a/test/results/default/snmp.pcap.out b/test/results/default/snmp.pcap.out index 15827430e..c9552f95a 100644 --- a/test/results/default/snmp.pcap.out +++ b/test/results/default/snmp.pcap.out @@ -116,26 +116,26 @@ 01092{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1597328648399219,"flow_src_last_pkt_time":1597328660640336,"flow_dst_last_pkt_time":1597328648399219,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":125,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":146,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":271,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1597328765050571,"l3_proto":"ip4","src_ip":"200.76.132.137","dst_ip":"189.111.255.214","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00970{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1597328704045369,"flow_src_last_pkt_time":1597328710051817,"flow_dst_last_pkt_time":1597328704045369,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":230,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":250,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":480,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1597328765050571,"l3_proto":"ip4","src_ip":"113.19.156.111","dst_ip":"135.201.124.55","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00796{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":63,"packets-processed":62,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":7038,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":15,"total-detection-updates":6,"total-updates":10,"current-active-flows":4,"total-active-flows":15,"total-idle-flows":11,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":118,"global_ts_usec":1643702947966305} -00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643702947966305,"flow_src_last_pkt_time":1643702947966305,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":185,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":185,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":185,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702947966305,"l3_proto":"ip4","src_ip":"10.231.2.134","dst_ip":"10.72.247.4","src_port":161,"dst_port":61088,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} -00762{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1643702947966305,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_usec":1643702947966305,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1To\/AABAETBgCucChgpI9wQAoe6gAMF5TzCCALUCAQEEBGFkc2yiggCoAgJkLgIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"} -01091{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643702947966305,"flow_src_last_pkt_time":1643702947966305,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":185,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":185,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":185,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702947966305,"l3_proto":"ip4","src_ip":"10.231.2.134","dst_ip":"10.72.247.4","src_port":161,"dst_port":61088,"l4_proto":"udp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","snmp": {"version":1,"primitive":2,"error_status":19}}} +00789{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643702947966305,"flow_src_last_pkt_time":1643702947966305,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":185,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":185,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":185,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702947966305,"vlan_id":908,"l3_proto":"ip4","src_ip":"10.231.2.134","dst_ip":"10.72.247.4","src_port":161,"dst_port":61088,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +00776{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","vlan_id":908,"flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1643702947966305,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_usec":1643702947966305,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1To\/AABAETBgCucChgpI9wQAoe6gAMF5TzCCALUCAQEEBGFkc2yiggCoAgJkLgIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"} +01105{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643702947966305,"flow_src_last_pkt_time":1643702947966305,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":185,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":185,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":185,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702947966305,"vlan_id":908,"l3_proto":"ip4","src_ip":"10.231.2.134","dst_ip":"10.72.247.4","src_port":161,"dst_port":61088,"l4_proto":"udp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","snmp": {"version":1,"primitive":2,"error_status":19}}} 01090{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1597328648399219,"flow_src_last_pkt_time":1597328660640336,"flow_dst_last_pkt_time":1597328648399219,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":125,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":146,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":271,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702947966305,"l3_proto":"ip4","src_ip":"200.76.132.137","dst_ip":"189.111.255.214","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"46": {"risk":"Unidirectional Traffic","severity":"Low","risk_score": {"total":500,"client":430,"server":70}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00968{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1597328704045369,"flow_src_last_pkt_time":1597328710051817,"flow_dst_last_pkt_time":1597328704045369,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":230,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":250,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":480,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702947966305,"l3_proto":"ip4","src_ip":"113.19.156.111","dst_ip":"135.201.124.55","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00967{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1597328757701238,"flow_src_last_pkt_time":1597328765050571,"flow_dst_last_pkt_time":1597328757701238,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":220,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":240,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":460,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702947966305,"l3_proto":"ip4","src_ip":"124.53.196.176","dst_ip":"103.248.22.47","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00967{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1597328734790652,"flow_src_last_pkt_time":1597328742081478,"flow_dst_last_pkt_time":1597328734790652,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":241,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":262,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":503,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702947966305,"l3_proto":"ip4","src_ip":"205.83.36.228","dst_ip":"160.174.106.32","src_port":54318,"dst_port":162,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00761{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_src_last_pkt_time":1643702958965878,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_usec":1643702958965878,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1fKQAABAEXgOCucChgpI9wQAoe6gAMFeTzCCALUCAQEEBGFkc2yiggCoAgJkSQIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"} -00762{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_src_last_pkt_time":1643702975965040,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_usec":1643702975965040,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1RJZAABAEVhGCucChgpI9wQAoe6gAME\/TzCCALUCAQEEBGFkc2yiggCoAgJkaAIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"} -00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643702987695436,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987695436,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1097,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1097,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1097,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702987695436,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} -01982{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987695436,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1143,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":1143,"pkt_l4_len":1105,"thread_ts_usec":1643702987695436,"pkt":"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"} -00981{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643702987695436,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987695436,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1097,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1097,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1097,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702987695436,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","snmp": {"version":1,"primitive":0,"error_status":0}}} -00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987761622,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":75,"pkt_l4_len":37,"thread_ts_usec":1643702987761622,"pkt":"AAAAAAAAAAUAAAAIgQAFHAgARQAAOaWFAAA+Ebx9CmT9kgpjCFgAoajqACXVjjAbAgEBBAZwdWJsaWOiDgIEJhJ9vwIBAQIBADAA"} -01104{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":67,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1643702987695436,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987761622,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1097,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1097,"flow_dst_max_l4_payload_len":29,"flow_src_tot_l4_payload_len":1097,"flow_dst_tot_l4_payload_len":29,"midstream":0,"thread_ts_usec":1643702987761622,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","snmp": {"version":1,"primitive":2,"error_status":1}}} -01271{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":3,"flow_src_last_pkt_time":1643702987763067,"flow_dst_last_pkt_time":1643702987761622,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":611,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":611,"pkt_l4_len":573,"thread_ts_usec":1643702987763067,"pkt":"AAAAAAAAAAUAAAAIgQAFHAgARQACUQAAQAA7ESLrCmMIWApk\/ZKo6gChAj3MpjCCAjECAQEEBnB1YmxpY6CCAiICBCYSfcACAQACAQAwggISMA8GCysGAQIBHwEBAQZkBQAwDwYLKwYBAgEfAQEBCmwFADAPBgsrBgECAR8BAQEKBgUAMA8GCysGAQIBHwEBAQYLBQAwDwYLKwYBAgEfAQEBBk4FADAPBgsrBgECAR8BAQEGXQUAMA8GCysGAQIBHwEBAQpFBQAwDwYLKwYBAgEfAQEBCgEFADAPBgsrBgECAWMBAQEEEQUAMBAGDCsGAQIBHwEBAQaBAAUAMA8GCysGAQIBHwEBAQoDBQAwDwYLKwYBAgEfAQEBBmMFADAQBgwrBgECAR8BAQEKgRAFADAPBgsrBgECAR8BAQEGSAUAMA8GCysGAQIBHwEBAQoWBQAwDwYLKwYBAgFjAQEBBBMFADAPBgsrBgECAR8BAQEKRwUAMBAGDCsGAQIBHwEBAQaBCQUAMA8GCysGAQIBHwEBAQYCBQAwDwYLKwYBAgEfAQEBCkwFADAPBgsrBgECAR8BAQEKXgUAMA8GCysGAQIBHwEBAQpvBQAwDwYLKwYBAgEfAQEBCmEFADAPBgsrBgECAR8BAQEKOAUAMA8GCysGAQIBHwEBAQo\/BQAwDwYLKwYBAgEfAQEBBnYFADAPBgsrBgECAR8BAQEKFAUAMA8GCysGAQIBHwEBAQZfBQAwDwYLKwYBAgEfAQEBCkIFADAPBgsrBgECAR8BAQEKXwUAMA8GCysGAQIBHwEBAQZgBQA="} -01402{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":4,"flow_src_last_pkt_time":1643702987763067,"flow_dst_last_pkt_time":1643702987782892,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":710,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":710,"pkt_l4_len":672,"thread_ts_usec":1643702987782892,"pkt":"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"} -01274{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":5,"flow_src_last_pkt_time":1643702987784304,"flow_dst_last_pkt_time":1643702987782892,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":613,"pkt_l4_len":575,"thread_ts_usec":1643702987784304,"pkt":"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"} -00761{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":4,"flow_src_last_pkt_time":1643703001963541,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_usec":1643703001963541,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1WA+AABAEQphCucChgpI9wQAoe6gAMEJTzCCALUCAQEEBGFkc2yiggCoAgJkngIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"} -01084{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"finished","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1643702987695436,"flow_src_last_pkt_time":1643702987784304,"flow_dst_last_pkt_time":1643702987801396,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":565,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1097,"flow_dst_max_l4_payload_len":671,"flow_src_tot_l4_payload_len":2229,"flow_dst_tot_l4_payload_len":1364,"midstream":0,"thread_ts_usec":1643703001963541,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -01076{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":0,"flow_first_seen":1643702947966305,"flow_src_last_pkt_time":1643703001963541,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":185,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":185,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":740,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643703001963541,"l3_proto":"ip4","src_ip":"10.231.2.134","dst_ip":"10.72.247.4","src_port":161,"dst_port":61088,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} +00775{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","vlan_id":908,"flow_id":16,"flow_packet_id":2,"flow_src_last_pkt_time":1643702958965878,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_usec":1643702958965878,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1fKQAABAEXgOCucChgpI9wQAoe6gAMFeTzCCALUCAQEEBGFkc2yiggCoAgJkSQIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"} +00776{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","vlan_id":908,"flow_id":16,"flow_packet_id":3,"flow_src_last_pkt_time":1643702975965040,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_usec":1643702975965040,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1RJZAABAEVhGCucChgpI9wQAoe6gAME\/TzCCALUCAQEEBGFkc2yiggCoAgJkaAIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"} +00794{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643702987695436,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987695436,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1097,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1097,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1097,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702987695436,"vlan_id":1308,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5} +01997{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","vlan_id":1308,"flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987695436,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":1143,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":1143,"pkt_l4_len":1105,"thread_ts_usec":1643702987695436,"pkt":"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"} +00996{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1643702987695436,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987695436,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1097,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1097,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1097,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643702987695436,"vlan_id":1308,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","snmp": {"version":1,"primitive":0,"error_status":0}}} +00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","vlan_id":1308,"flow_id":17,"flow_packet_id":2,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987761622,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":75,"pkt_l4_len":37,"thread_ts_usec":1643702987761622,"pkt":"AAAAAAAAAAUAAAAIgQAFHAgARQAAOaWFAAA+Ebx9CmT9kgpjCFgAoajqACXVjjAbAgEBBAZwdWJsaWOiDgIEJhJ9vwIBAQIBADAA"} +01119{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":67,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1643702987695436,"flow_src_last_pkt_time":1643702987695436,"flow_dst_last_pkt_time":1643702987761622,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1097,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1097,"flow_dst_max_l4_payload_len":29,"flow_src_tot_l4_payload_len":1097,"flow_dst_tot_l4_payload_len":29,"midstream":0,"thread_ts_usec":1643702987761622,"vlan_id":1308,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","snmp": {"version":1,"primitive":2,"error_status":1}}} +01286{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","vlan_id":1308,"flow_id":17,"flow_packet_id":3,"flow_src_last_pkt_time":1643702987763067,"flow_dst_last_pkt_time":1643702987761622,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":611,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":611,"pkt_l4_len":573,"thread_ts_usec":1643702987763067,"pkt":"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"} +01417{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","vlan_id":1308,"flow_id":17,"flow_packet_id":4,"flow_src_last_pkt_time":1643702987763067,"flow_dst_last_pkt_time":1643702987782892,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":710,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":710,"pkt_l4_len":672,"thread_ts_usec":1643702987782892,"pkt":"AAAAAAAAAAUAAAAIgQAFHAgARQACtKWHAAA+EboACmT9kgpjCFgAoajqAqBBSTCCApQCAQEEBnB1YmxpY6KCAoUCBCYSfcACAQACAQAwggJ1MBAGCysGAQIBHwEBAQZkRgEAMBAGCysGAQIBHwEBAQpsRgEAMBAGCysGAQIBHwEBAQoGRgEAMBQGCysGAQIBHwEBAQYLRgUXp1N9djAQBgsrBgECAR8BAQEGTkYBADATBgsrBgECAR8BAQEGXUYEBXqByDAUBgsrBgECAR8BAQEKRUYFAZFCY\/cwEwYLKwYBAgEfAQEBCgFGBAuEjtkwEAYLKwYBAgFjAQEBBBECATYwEQYMKwYBAgEfAQEBBoEARgEAMBMGCysGAQIBHwEBAQoDRgQNJQJuMBAGCysGAQIBHwEBAQZjRgEAMBEGDCsGAQIBHwEBAQqBEEYBADATBgsrBgECAR8BAQEGSEYEXuVZIjAUBgsrBgECAR8BAQEKFkYFA8yD5kAwEAYLKwYBAgFjAQEBBBMCASMwFAYLKwYBAgEfAQEBCkdGBQCjJTv1MBEGDCsGAQIBHwEBAQaBCUYBADAQBgsrBgECAR8BAQEGAkYBADAQBgsrBgECAR8BAQEKTEYBADAUBgsrBgECAR8BAQEKXkYFAMYICRIwFAYLKwYBAgEfAQEBCm9GBQDKJK3WMBQGCysGAQIBHwEBAQphRgUAwPMhwzAUBgsrBgECAR8BAQEKOEYFAt9bs3cwFAYLKwYBAgEfAQEBCj9GBQPIie1eMBMGCysGAQIBHwEBAQZ2RgREuhKCMBQGCysGAQIBHwEBAQoURgUB283+vDATBgsrBgECAR8BAQEGX0YEAlPHnTAUBgsrBgECAR8BAQEKQkYFAXd63RowEwYLKwYBAgEfAQEBCl9GBB7+S0owEwYLKwYBAgEfAQEBBmBGBBa15qI="} +01289{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","vlan_id":1308,"flow_id":17,"flow_packet_id":5,"flow_src_last_pkt_time":1643702987784304,"flow_dst_last_pkt_time":1643702987782892,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":613,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":613,"pkt_l4_len":575,"thread_ts_usec":1643702987784304,"pkt":"AAAAAAAAAAUAAAAIgQAFHAgARQACUwAAQAA7ESLpCmMIWApk\/ZKo6gChAj8pXzCCAjMCAQEEBnB1YmxpY6CCAiQCBCYSfcECAQACAQAwggIUMBAGDCsGAQIBHwEBAQqBDgUAMBAGDCsGAQIBHwEBAQaBCwUAMA8GCysGAQIBHwEBAQo3BQAwDwYLKwYBAgEfAQEBCkYFADAQBgwrBgECAR8BAQEKgQcFADAQBgwrBgECAR8BAQEKhEwFADAQBgwrBgECAR8BAQEKgQwFADAPBgsrBgECAR8BAQEGRwUAMA8GCysGAQIBHwEBAQZYBQAwDwYLKwYBAgEfAQEBBj0FADAPBgsrBgECAR8BAQEGbgUAMA8GCysGAQIBHwEBAQY+BQAwDwYLKwYBAgEfAQEBBlAFADAPBgsrBgECAR8BAQEGaQUAMA8GCysGAQIBHwEBAQZ6BQAwDwYLKwYBAgEfAQEBCn8FADAPBgsrBgECAR8BAQEGXgUAMA8GCysGAQIBHwEBAQYUBQAwDwYLKwYBAgEfAQEBCk0FADAPBgsrBgECAR8BAQEGBAUAMA8GCysGAQIBHwEBAQo8BQAwDwYLKwYBAgEfAQEBCgoFADAPBgsrBgECAR8BAQEGDwUAMA8GCysGAQIBHwEBAQZ7BQAwDwYLKwYBAgEfAQEBCngFADAPBgsrBgECAR8BAQEGVAUAMA8GCysGAQIBHwEBAQpVBQAwDwYLKwYBAgEfAQEBCnsFADAPBgsrBgECAR8BAQEGZQUAMA8GCysGAQIBHwEBAQZLBQAwDwYLKwYBAgEfAQEBBlIFAA=="} +00775{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","vlan_id":908,"flow_id":16,"flow_packet_id":4,"flow_src_last_pkt_time":1643703001963541,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"pkt_datalink":1,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":231,"pkt_l4_len":193,"thread_ts_usec":1643703001963541,"pkt":"AAAAAAAAAAEAAAAIgQADjAgARcAA1WA+AABAEQphCucChgpI9wQAoe6gAMEJTzCCALUCAQEEBGFkc2yiggCoAgJkngIBEwIBATCCAJowggCWBg8rBgEEAa1zWwEBAQEBDwEEgYJCR01QAQAAAAAAAAEwMDAwMDAAAAAAAAAAAAAAAABSMS42MS4xMi4wMAAAAAAAAAAAAAAAAAAAAAAAAAEAAAABAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAQAA"} +01099{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"finished","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1643702987695436,"flow_src_last_pkt_time":1643702987784304,"flow_dst_last_pkt_time":1643702987801396,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":565,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1097,"flow_dst_max_l4_payload_len":671,"flow_src_tot_l4_payload_len":2229,"flow_dst_tot_l4_payload_len":1364,"midstream":0,"thread_ts_usec":1643703001963541,"vlan_id":1308,"l3_proto":"ip4","src_ip":"10.99.8.88","dst_ip":"10.100.253.146","src_port":43242,"dst_port":161,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} +01090{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":0,"flow_first_seen":1643702947966305,"flow_src_last_pkt_time":1643703001963541,"flow_dst_last_pkt_time":1643702947966305,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":185,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":185,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":740,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1643703001963541,"vlan_id":908,"l3_proto":"ip4","src_ip":"10.231.2.134","dst_ip":"10.72.247.4","src_port":161,"dst_port":61088,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":5,"ndpi": {"flow_risk": {"43": {"risk":"Error Code","severity":"Low","risk_score": {"total":360,"client":300,"server":60}}},"confidence": {"6":"DPI"},"proto":"SNMP","proto_id":"14","proto_by_ip":"Unknown","proto_by_ip_id":0,"encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00799{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":72,"source":"cfgs\/default\/pcap\/snmp.pcap","alias":"nDPId-test","version":"1.7.0","ndpi_version":"4.11.0-4834-92507c0","packets-captured":72,"packets-processed":72,"pfring_active":false,"pfring_recv":0,"pfring_drop":0,"pfring_shunt":0,"total-skipped-flows":0,"total-l4-payload-len":11371,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":17,"total-detection-updates":7,"total-updates":10,"current-active-flows":0,"total-active-flows":17,"total-idle-flows":17,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"global-alloc-count":0,"global-free-count":0,"global-alloc-bytes":0,"global-free-bytes":0,"total-events-serialized":139,"global_ts_usec":1643703001963541} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 72/72 @@ -149,6 +149,6 @@ ~~ total memory freed........: 6680398 bytes ~~ total allocations/frees...: 114268/114268 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json message min len.......: 555 chars -~~ json message max len.......: 1987 chars -~~ json message avg len.......: 1270 chars +~~ json message min len.......: 565 chars +~~ json message max len.......: 2002 chars +~~ json message avg len.......: 1282 chars |