diff options
Diffstat (limited to 'test/results/flow-captured')
90 files changed, 2382 insertions, 2382 deletions
diff --git a/test/results/flow-captured/caches_cfg/teams.pcap.out b/test/results/flow-captured/caches_cfg/teams.pcap.out index 4e70f518c..88544269b 100644 --- a/test/results/flow-captured/caches_cfg/teams.pcap.out +++ b/test/results/flow-captured/caches_cfg/teams.pcap.out @@ -1,9 +1,7 @@ Flow 48 risky: tcp 192.168.1.6:60559 -> 52.114.77.33:443 Flow 64 risky: tcp 192.168.1.6:50018 -> 52.114.250.123:443 Flow 78 risky: udp 93.71.110.205:16332 -> 192.168.1.6:50016 -Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 43 risky: tcp 192.168.1.6:60554 -> 52.113.194.132:443 -Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 4 risky: tcp 192.168.1.6:60532 -> 52.114.77.33:443 Flow 7 risky: tcp 192.168.1.6:60535 -> 52.114.77.33:443 Flow 25 risky: tcp 192.168.1.6:60543 -> 52.114.77.33:443 @@ -11,7 +9,9 @@ Flow 51 risky: tcp 192.168.1.6:60561 -> 52.114.77.33:443 Flow 74 risky: tcp 192.168.1.6:60567 -> 52.114.77.136:443 Flow 60 not-detected: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 Flow 60 midstream: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 -Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 +Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 10 risky: udp 192.168.1.6:64046 -> 192.168.1.1:53 +Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 68 risky: udp 192.168.1.6:50016 -> 52.114.250.141:3478 Flow 70 risky: udp 192.168.1.6:50036 -> 52.114.250.137:3478 +Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 diff --git a/test/results/flow-captured/caches_global/bittorrent.pcap.out b/test/results/flow-captured/caches_global/bittorrent.pcap.out index 05cf521a2..6e5155d66 100644 --- a/test/results/flow-captured/caches_global/bittorrent.pcap.out +++ b/test/results/flow-captured/caches_global/bittorrent.pcap.out @@ -4,34 +4,22 @@ Flow 2 risky: tcp 192.168.1.3:52887 -> 82.57.97.83:53137 Flow 2 midstream: tcp 192.168.1.3:52887 -> 82.57.97.83:53137 Flow 11 risky: tcp 192.168.1.3:52906 -> 82.57.97.83:53137 Flow 11 midstream: tcp 192.168.1.3:52906 -> 82.57.97.83:53137 -Flow 3 midstream: tcp 192.168.1.3:52895 -> 83.216.184.241:51413 -Flow 22 midstream: tcp 192.168.1.3:52927 -> 83.216.184.241:51413 -Flow 21 risky: tcp 192.168.1.3:52922 -> 95.237.193.34:11321 -Flow 21 midstream: tcp 192.168.1.3:52922 -> 95.237.193.34:11321 -Flow 13 risky: tcp 192.168.1.3:52912 -> 151.72.255.163:59928 -Flow 13 midstream: tcp 192.168.1.3:52912 -> 151.72.255.163:59928 -Flow 6 risky: tcp 192.168.1.3:52897 -> 151.26.95.30:22673 -Flow 6 midstream: tcp 192.168.1.3:52897 -> 151.26.95.30:22673 -Flow 12 risky: tcp 192.168.1.3:52911 -> 151.26.95.30:22673 -Flow 12 midstream: tcp 192.168.1.3:52911 -> 151.26.95.30:22673 Flow 20 risky: tcp 192.168.1.3:52921 -> 95.234.159.16:41205 Flow 20 midstream: tcp 192.168.1.3:52921 -> 95.234.159.16:41205 -Flow 23 risky: tcp 192.168.1.3:52926 -> 93.65.249.100:31336 -Flow 23 midstream: tcp 192.168.1.3:52926 -> 93.65.249.100:31336 Flow 24 risky: tcp 192.168.1.3:52925 -> 93.65.227.100:19116 Flow 24 midstream: tcp 192.168.1.3:52925 -> 93.65.227.100:19116 +Flow 21 risky: tcp 192.168.1.3:52922 -> 95.237.193.34:11321 +Flow 21 midstream: tcp 192.168.1.3:52922 -> 95.237.193.34:11321 Flow 9 risky: tcp 192.168.1.3:52902 -> 190.103.195.56:46633 Flow 9 midstream: tcp 192.168.1.3:52902 -> 190.103.195.56:46633 Flow 18 risky: tcp 192.168.1.3:52914 -> 190.103.195.56:46633 Flow 18 midstream: tcp 192.168.1.3:52914 -> 190.103.195.56:46633 -Flow 4 risky: tcp 192.168.1.3:52896 -> 79.53.228.2:14627 -Flow 4 midstream: tcp 192.168.1.3:52896 -> 79.53.228.2:14627 -Flow 14 risky: tcp 192.168.1.3:52909 -> 79.53.228.2:14627 -Flow 14 midstream: tcp 192.168.1.3:52909 -> 79.53.228.2:14627 -Flow 7 risky: tcp 192.168.1.3:52893 -> 79.55.129.22:12097 -Flow 7 midstream: tcp 192.168.1.3:52893 -> 79.55.129.22:12097 -Flow 16 risky: tcp 192.168.1.3:52908 -> 79.55.129.22:12097 -Flow 16 midstream: tcp 192.168.1.3:52908 -> 79.55.129.22:12097 +Flow 3 midstream: tcp 192.168.1.3:52895 -> 83.216.184.241:51413 +Flow 22 midstream: tcp 192.168.1.3:52927 -> 83.216.184.241:51413 +Flow 13 risky: tcp 192.168.1.3:52912 -> 151.72.255.163:59928 +Flow 13 midstream: tcp 192.168.1.3:52912 -> 151.72.255.163:59928 +Flow 23 risky: tcp 192.168.1.3:52926 -> 93.65.249.100:31336 +Flow 23 midstream: tcp 192.168.1.3:52926 -> 93.65.249.100:31336 Flow 19 risky: tcp 192.168.1.3:52917 -> 151.15.48.189:47001 Flow 19 midstream: tcp 192.168.1.3:52917 -> 151.15.48.189:47001 Flow 8 risky: tcp 192.168.1.3:52903 -> 198.100.146.9:60163 @@ -44,3 +32,15 @@ Flow 5 risky: tcp 192.168.1.3:52894 -> 120.62.33.241:39332 Flow 5 midstream: tcp 192.168.1.3:52894 -> 120.62.33.241:39332 Flow 15 risky: tcp 192.168.1.3:52910 -> 120.62.33.241:39332 Flow 15 midstream: tcp 192.168.1.3:52910 -> 120.62.33.241:39332 +Flow 7 risky: tcp 192.168.1.3:52893 -> 79.55.129.22:12097 +Flow 7 midstream: tcp 192.168.1.3:52893 -> 79.55.129.22:12097 +Flow 16 risky: tcp 192.168.1.3:52908 -> 79.55.129.22:12097 +Flow 16 midstream: tcp 192.168.1.3:52908 -> 79.55.129.22:12097 +Flow 4 risky: tcp 192.168.1.3:52896 -> 79.53.228.2:14627 +Flow 4 midstream: tcp 192.168.1.3:52896 -> 79.53.228.2:14627 +Flow 14 risky: tcp 192.168.1.3:52909 -> 79.53.228.2:14627 +Flow 14 midstream: tcp 192.168.1.3:52909 -> 79.53.228.2:14627 +Flow 6 risky: tcp 192.168.1.3:52897 -> 151.26.95.30:22673 +Flow 6 midstream: tcp 192.168.1.3:52897 -> 151.26.95.30:22673 +Flow 12 risky: tcp 192.168.1.3:52911 -> 151.26.95.30:22673 +Flow 12 midstream: tcp 192.168.1.3:52911 -> 151.26.95.30:22673 diff --git a/test/results/flow-captured/caches_global/lru_ipv6_caches.pcapng.out b/test/results/flow-captured/caches_global/lru_ipv6_caches.pcapng.out index 0247c3886..3756595b8 100644 --- a/test/results/flow-captured/caches_global/lru_ipv6_caches.pcapng.out +++ b/test/results/flow-captured/caches_global/lru_ipv6_caches.pcapng.out @@ -1,4 +1,4 @@ -Flow 2 risky: udp 3991:72d:336e:65ec:c5bf:a5fa:83ad:23de:6881 -> 3024:e5ee:ac2f:cd76:5dd6:a7a1:f17f:5c27:60506 Flow 7 risky: udp 2118:ec33:112b:7908:2c80:27ff:fef7:d71f:48415 -> 32fb:f967:681e:e96b:face:b00c::74fd:3478 Flow 12 risky: udp 3069:c624:1d42:9469:98b1:67ff:fe43:325:56131 -> 32fb:f967:681e:e96b:face:b00c::74fd:3478 Flow 3 risky: udp 2a2f:8509:1cb2:466d:ecbf:69d6:109c:608:62229 -> 3991:72d:336e:65ec:c5bf:a5fa:83ad:23de:6881 +Flow 2 risky: udp 3991:72d:336e:65ec:c5bf:a5fa:83ad:23de:6881 -> 3024:e5ee:ac2f:cd76:5dd6:a7a1:f17f:5c27:60506 diff --git a/test/results/flow-captured/caches_global/teams.pcap.out b/test/results/flow-captured/caches_global/teams.pcap.out index 4e70f518c..88544269b 100644 --- a/test/results/flow-captured/caches_global/teams.pcap.out +++ b/test/results/flow-captured/caches_global/teams.pcap.out @@ -1,9 +1,7 @@ Flow 48 risky: tcp 192.168.1.6:60559 -> 52.114.77.33:443 Flow 64 risky: tcp 192.168.1.6:50018 -> 52.114.250.123:443 Flow 78 risky: udp 93.71.110.205:16332 -> 192.168.1.6:50016 -Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 43 risky: tcp 192.168.1.6:60554 -> 52.113.194.132:443 -Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 4 risky: tcp 192.168.1.6:60532 -> 52.114.77.33:443 Flow 7 risky: tcp 192.168.1.6:60535 -> 52.114.77.33:443 Flow 25 risky: tcp 192.168.1.6:60543 -> 52.114.77.33:443 @@ -11,7 +9,9 @@ Flow 51 risky: tcp 192.168.1.6:60561 -> 52.114.77.33:443 Flow 74 risky: tcp 192.168.1.6:60567 -> 52.114.77.136:443 Flow 60 not-detected: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 Flow 60 midstream: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 -Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 +Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 10 risky: udp 192.168.1.6:64046 -> 192.168.1.1:53 +Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 68 risky: udp 192.168.1.6:50016 -> 52.114.250.141:3478 Flow 70 risky: udp 192.168.1.6:50036 -> 52.114.250.137:3478 +Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 diff --git a/test/results/flow-captured/default/1kxun.pcap.out b/test/results/flow-captured/default/1kxun.pcap.out index 034a664ad..fb82f703b 100644 --- a/test/results/flow-captured/default/1kxun.pcap.out +++ b/test/results/flow-captured/default/1kxun.pcap.out @@ -1,111 +1,111 @@ Flow 37 risky: tcp 192.168.115.8:49606 -> 106.185.35.110:80 Flow 41 risky: tcp 192.168.115.8:49609 -> 42.120.51.152:8080 -Flow 14 risky: udp 192.168.115.8:51024 -> 8.8.8.8:53 -Flow 20 risky: udp 192.168.3.95:58779 -> 224.0.0.252:5355 Flow 19 risky: udp fe80::e98f:bae2:19f7:6b0f:58779 -> ff02::1:3:5355 +Flow 20 risky: udp 192.168.3.95:58779 -> 224.0.0.252:5355 Flow 24 risky: udp 192.168.115.8:52723 -> 168.95.1.1:53 +Flow 14 risky: udp 192.168.115.8:51024 -> 8.8.8.8:53 Flow 16 risky: udp 192.168.115.8:52723 -> 8.8.8.8:53 -Flow 35 risky: udp 192.168.5.67:138 -> 192.168.255.255:138 -Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 39 risky: udp 192.168.115.8:54420 -> 8.8.8.8:53 +Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 26 risky: udp 192.168.115.8:60724 -> 8.8.8.8:53 +Flow 35 risky: udp 192.168.5.67:138 -> 192.168.255.255:138 Flow 33 risky: udp fe80::e98f:bae2:19f7:6b0f:54888 -> ff02::1:3:5355 -Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 -Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 -Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 -Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 -Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 -Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 Flow 38 risky: tcp 192.168.115.8:49607 -> 218.244.135.170:9099 +Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 +Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 Flow 42 not-detected: udp 192.168.10.110:60480 -> 255.255.255.255:62976 -Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 -Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 -Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 +Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 +Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 +Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 +Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 Flow 65 not-detected: udp 192.168.140.140:62976 -> 255.255.255.255:62976 Flow 71 not-detected: udp 192.168.10.7:62976 -> 255.255.255.255:62976 Flow 22 not-detected: udp 192.168.125.30:62976 -> 255.255.255.255:62976 Flow 88 not-detected: udp 192.168.119.1:56861 -> 255.255.255.255:5678 -Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 +Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 +Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 +Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 +Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 +Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 +Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 Flow 46 risky: tcp 192.168.115.8:49612 -> 183.131.48.145:80 Flow 49 risky: tcp 192.168.115.8:49613 -> 183.131.48.144:80 -Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 -Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 -Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 +Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 Flow 86 not-detected: udp 59.120.208.212:32768 -> 255.255.255.255:1947 Flow 142 midstream: tcp 192.168.2.126:46170 -> 172.105.121.82:80 Flow 146 midstream: tcp 192.168.2.126:45380 -> 161.117.13.29:80 Flow 160 midstream: tcp 192.168.2.126:49380 -> 14.136.136.108:80 Flow 158 midstream: tcp 192.168.2.126:49372 -> 14.136.136.108:80 Flow 150 midstream: tcp 192.168.2.126:45416 -> 161.117.13.29:80 -Flow 147 midstream: tcp 192.168.2.126:45388 -> 161.117.13.29:80 -Flow 148 midstream: tcp 192.168.2.126:45398 -> 161.117.13.29:80 -Flow 163 risky: tcp 192.168.2.126:44368 -> 172.217.18.98:80 -Flow 163 midstream: tcp 192.168.2.126:44368 -> 172.217.18.98:80 -Flow 178 risky: tcp 192.168.2.126:56826 -> 8.209.97.107:80 -Flow 178 midstream: tcp 192.168.2.126:56826 -> 8.209.97.107:80 -Flow 149 midstream: tcp 192.168.2.126:45414 -> 161.117.13.29:80 -Flow 151 midstream: tcp 192.168.2.126:45422 -> 161.117.13.29:80 -Flow 152 midstream: tcp 192.168.2.126:45424 -> 161.117.13.29:80 -Flow 192 midstream: tcp 192.168.2.126:54810 -> 18.233.123.55:80 -Flow 184 midstream: tcp 192.168.2.126:36636 -> 18.64.103.30:80 -Flow 185 midstream: tcp 192.168.2.126:36640 -> 18.64.103.30:80 -Flow 186 midstream: tcp 192.168.2.126:36654 -> 18.64.103.30:80 +Flow 130 risky: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 +Flow 130 midstream: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 +Flow 131 risky: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 +Flow 131 midstream: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 +Flow 132 risky: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 +Flow 132 midstream: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 +Flow 196 risky: tcp 192.168.2.126:35426 -> 8.209.112.118:80 +Flow 196 midstream: tcp 192.168.2.126:35426 -> 8.209.112.118:80 +Flow 172 midstream: tcp 192.168.2.126:59324 -> 104.117.221.10:80 +Flow 153 risky: tcp 192.168.2.126:41390 -> 18.64.79.37:80 +Flow 153 midstream: tcp 192.168.2.126:41390 -> 18.64.79.37:80 +Flow 191 midstream: tcp 192.168.2.126:41940 -> 18.64.79.50:80 +Flow 179 midstream: tcp 192.168.2.126:43272 -> 18.64.79.58:80 +Flow 195 midstream: tcp 192.168.2.126:33042 -> 3.122.190.70:80 Flow 180 midstream: tcp 192.168.2.126:58758 -> 202.153.196.53:80 Flow 181 midstream: tcp 192.168.2.126:58760 -> 202.153.196.53:80 Flow 170 midstream: tcp 192.168.2.126:38314 -> 172.105.121.82:80 Flow 171 midstream: tcp 192.168.2.126:38316 -> 172.105.121.82:80 Flow 169 midstream: tcp 192.168.2.126:38326 -> 172.105.121.82:80 +Flow 134 midstream: tcp 192.168.2.126:41134 -> 129.226.107.77:80 +Flow 163 risky: tcp 192.168.2.126:44368 -> 172.217.18.98:80 +Flow 163 midstream: tcp 192.168.2.126:44368 -> 172.217.18.98:80 Flow 193 midstream: tcp 192.168.2.126:40204 -> 18.235.204.9:80 +Flow 197 midstream: tcp 192.168.2.126:51686 -> 18.64.79.64:80 +Flow 156 midstream: tcp 192.168.2.126:36732 -> 142.250.186.174:80 Flow 155 midstream: tcp 192.168.2.126:38354 -> 142.250.186.34:80 -Flow 157 midstream: tcp 192.168.2.126:49354 -> 14.136.136.108:80 -Flow 159 midstream: tcp 192.168.2.126:49370 -> 14.136.136.108:80 -Flow 162 midstream: tcp 192.168.2.126:49396 -> 14.136.136.108:80 +Flow 141 midstream: tcp 192.168.2.126:46184 -> 172.105.121.82:80 +Flow 143 midstream: tcp 192.168.2.126:46200 -> 172.105.121.82:80 +Flow 144 midstream: tcp 192.168.2.126:46212 -> 172.105.121.82:80 +Flow 173 midstream: tcp 192.168.2.126:56094 -> 3.72.69.158:80 +Flow 175 midstream: tcp 192.168.2.126:56096 -> 3.72.69.158:80 +Flow 174 midstream: tcp 192.168.2.126:56098 -> 3.72.69.158:80 +Flow 176 midstream: tcp 192.168.2.126:56104 -> 3.72.69.158:80 +Flow 145 midstream: tcp 192.168.2.126:35200 -> 103.29.71.30:80 +Flow 147 midstream: tcp 192.168.2.126:45388 -> 161.117.13.29:80 +Flow 148 midstream: tcp 192.168.2.126:45398 -> 161.117.13.29:80 +Flow 149 midstream: tcp 192.168.2.126:45414 -> 161.117.13.29:80 +Flow 151 midstream: tcp 192.168.2.126:45422 -> 161.117.13.29:80 +Flow 152 midstream: tcp 192.168.2.126:45424 -> 161.117.13.29:80 Flow 140 risky: tcp 192.168.2.126:49242 -> 172.104.119.80:80 Flow 140 midstream: tcp 192.168.2.126:49242 -> 172.104.119.80:80 -Flow 161 midstream: tcp 192.168.2.126:49412 -> 14.136.136.108:80 -Flow 179 midstream: tcp 192.168.2.126:43272 -> 18.64.79.58:80 +Flow 194 risky: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 194 midstream: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 133 risky: tcp 192.168.2.126:47230 -> 161.117.13.29:80 +Flow 133 midstream: tcp 192.168.2.126:47230 -> 161.117.13.29:80 +Flow 188 risky: tcp 192.168.2.126:37100 -> 52.29.177.177:80 +Flow 188 midstream: tcp 192.168.2.126:37100 -> 52.29.177.177:80 +Flow 135 midstream: tcp 192.168.2.126:47246 -> 161.117.13.29:80 +Flow 136 midstream: tcp 192.168.2.126:47262 -> 161.117.13.29:80 +Flow 137 midstream: tcp 192.168.2.126:47272 -> 161.117.13.29:80 +Flow 178 risky: tcp 192.168.2.126:56826 -> 8.209.97.107:80 +Flow 178 midstream: tcp 192.168.2.126:56826 -> 8.209.97.107:80 Flow 164 midstream: tcp 192.168.2.126:50140 -> 161.117.13.29:80 Flow 165 midstream: tcp 192.168.2.126:50148 -> 161.117.13.29:80 Flow 166 midstream: tcp 192.168.2.126:50164 -> 161.117.13.29:80 Flow 167 midstream: tcp 192.168.2.126:50166 -> 161.117.13.29:80 Flow 168 midstream: tcp 192.168.2.126:50176 -> 161.117.13.29:80 -Flow 153 risky: tcp 192.168.2.126:41390 -> 18.64.79.37:80 -Flow 153 midstream: tcp 192.168.2.126:41390 -> 18.64.79.37:80 -Flow 197 midstream: tcp 192.168.2.126:51686 -> 18.64.79.64:80 -Flow 156 midstream: tcp 192.168.2.126:36732 -> 142.250.186.174:80 -Flow 194 risky: tcp 192.168.2.126:53416 -> 172.217.16.142:80 -Flow 194 midstream: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 192 midstream: tcp 192.168.2.126:54810 -> 18.233.123.55:80 Flow 189 midstream: tcp 192.168.2.126:42554 -> 35.156.44.13:80 Flow 190 risky: tcp 192.168.2.126:42566 -> 35.156.44.13:80 Flow 190 midstream: tcp 192.168.2.126:42566 -> 35.156.44.13:80 -Flow 195 midstream: tcp 192.168.2.126:33042 -> 3.122.190.70:80 -Flow 173 midstream: tcp 192.168.2.126:56094 -> 3.72.69.158:80 -Flow 175 midstream: tcp 192.168.2.126:56096 -> 3.72.69.158:80 -Flow 174 midstream: tcp 192.168.2.126:56098 -> 3.72.69.158:80 -Flow 176 midstream: tcp 192.168.2.126:56104 -> 3.72.69.158:80 -Flow 134 midstream: tcp 192.168.2.126:41134 -> 129.226.107.77:80 -Flow 130 risky: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 -Flow 130 midstream: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 -Flow 131 risky: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 -Flow 131 midstream: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 -Flow 132 risky: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 -Flow 132 midstream: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 -Flow 196 risky: tcp 192.168.2.126:35426 -> 8.209.112.118:80 -Flow 196 midstream: tcp 192.168.2.126:35426 -> 8.209.112.118:80 -Flow 191 midstream: tcp 192.168.2.126:41940 -> 18.64.79.50:80 -Flow 139 midstream: tcp 192.168.2.126:60148 -> 172.105.121.82:80 -Flow 172 midstream: tcp 192.168.2.126:59324 -> 104.117.221.10:80 Flow 138 risky: tcp 192.168.2.126:38834 -> 119.45.78.184:80 Flow 138 midstream: tcp 192.168.2.126:38834 -> 119.45.78.184:80 +Flow 157 midstream: tcp 192.168.2.126:49354 -> 14.136.136.108:80 +Flow 159 midstream: tcp 192.168.2.126:49370 -> 14.136.136.108:80 +Flow 162 midstream: tcp 192.168.2.126:49396 -> 14.136.136.108:80 +Flow 161 midstream: tcp 192.168.2.126:49412 -> 14.136.136.108:80 Flow 182 midstream: tcp 192.168.2.126:35664 -> 18.66.2.90:80 -Flow 141 midstream: tcp 192.168.2.126:46184 -> 172.105.121.82:80 -Flow 133 risky: tcp 192.168.2.126:47230 -> 161.117.13.29:80 -Flow 133 midstream: tcp 192.168.2.126:47230 -> 161.117.13.29:80 -Flow 188 risky: tcp 192.168.2.126:37100 -> 52.29.177.177:80 -Flow 188 midstream: tcp 192.168.2.126:37100 -> 52.29.177.177:80 -Flow 143 midstream: tcp 192.168.2.126:46200 -> 172.105.121.82:80 -Flow 135 midstream: tcp 192.168.2.126:47246 -> 161.117.13.29:80 -Flow 144 midstream: tcp 192.168.2.126:46212 -> 172.105.121.82:80 -Flow 136 midstream: tcp 192.168.2.126:47262 -> 161.117.13.29:80 -Flow 137 midstream: tcp 192.168.2.126:47272 -> 161.117.13.29:80 -Flow 145 midstream: tcp 192.168.2.126:35200 -> 103.29.71.30:80 +Flow 184 midstream: tcp 192.168.2.126:36636 -> 18.64.103.30:80 +Flow 185 midstream: tcp 192.168.2.126:36640 -> 18.64.103.30:80 +Flow 186 midstream: tcp 192.168.2.126:36654 -> 18.64.103.30:80 +Flow 139 midstream: tcp 192.168.2.126:60148 -> 172.105.121.82:80 diff --git a/test/results/flow-captured/default/EAQ.pcap.out b/test/results/flow-captured/default/EAQ.pcap.out index 14208209c..ba1d6ab32 100644 --- a/test/results/flow-captured/default/EAQ.pcap.out +++ b/test/results/flow-captured/default/EAQ.pcap.out @@ -1,23 +1,23 @@ +Flow 6 risky: udp 10.8.0.1:41438 -> 200.194.141.66:6000 +Flow 24 risky: udp 10.8.0.1:43934 -> 200.194.136.68:6000 +Flow 25 risky: udp 10.8.0.1:47346 -> 200.194.134.66:6000 +Flow 1 risky: tcp 10.8.0.1:53497 -> 173.194.119.48:80 +Flow 15 risky: udp 10.8.0.1:47714 -> 200.194.129.68:6000 Flow 17 risky: udp 10.8.0.1:48563 -> 200.194.141.67:6000 Flow 14 risky: udp 10.8.0.1:48666 -> 200.194.129.66:6000 -Flow 21 risky: udp 10.8.0.1:57004 -> 200.194.133.67:6000 -Flow 23 risky: udp 10.8.0.1:36552 -> 200.194.136.66:6000 -Flow 2 risky: tcp 10.8.0.1:40467 -> 173.194.119.24:80 -Flow 26 risky: udp 10.8.0.1:59098 -> 200.194.134.68:6000 -Flow 28 risky: udp 10.8.0.1:36577 -> 200.194.149.68:6000 +Flow 27 risky: udp 10.8.0.1:50175 -> 200.194.149.67:6000 Flow 22 risky: udp 10.8.0.1:53059 -> 200.194.133.68:6000 -Flow 9 risky: udp 10.8.0.1:34687 -> 200.194.141.68:6000 Flow 11 risky: udp 10.8.0.1:53354 -> 200.194.137.66:6000 -Flow 25 risky: udp 10.8.0.1:47346 -> 200.194.134.66:6000 -Flow 10 risky: udp 10.8.0.1:39221 -> 200.194.137.67:6000 -Flow 1 risky: tcp 10.8.0.1:53497 -> 173.194.119.48:80 -Flow 6 risky: udp 10.8.0.1:41438 -> 200.194.141.66:6000 +Flow 20 risky: udp 10.8.0.1:56128 -> 200.194.133.66:6000 +Flow 21 risky: udp 10.8.0.1:57004 -> 200.194.133.67:6000 +Flow 26 risky: udp 10.8.0.1:59098 -> 200.194.134.68:6000 Flow 12 risky: udp 10.8.0.1:59959 -> 200.194.137.68:6000 -Flow 30 risky: udp 10.8.0.1:33356 -> 200.194.149.66:6000 -Flow 15 risky: udp 10.8.0.1:47714 -> 200.194.129.68:6000 Flow 29 risky: udp 10.8.0.1:60013 -> 200.194.136.67:6000 -Flow 20 risky: udp 10.8.0.1:56128 -> 200.194.133.66:6000 -Flow 24 risky: udp 10.8.0.1:43934 -> 200.194.136.68:6000 -Flow 27 risky: udp 10.8.0.1:50175 -> 200.194.149.67:6000 +Flow 30 risky: udp 10.8.0.1:33356 -> 200.194.149.66:6000 +Flow 2 risky: tcp 10.8.0.1:40467 -> 173.194.119.24:80 +Flow 9 risky: udp 10.8.0.1:34687 -> 200.194.141.68:6000 +Flow 23 risky: udp 10.8.0.1:36552 -> 200.194.136.66:6000 +Flow 28 risky: udp 10.8.0.1:36577 -> 200.194.149.68:6000 Flow 13 risky: udp 10.8.0.1:37985 -> 200.194.129.67:6000 +Flow 10 risky: udp 10.8.0.1:39221 -> 200.194.137.67:6000 Flow 31 risky: udp 10.8.0.1:40058 -> 200.194.134.67:6000 diff --git a/test/results/flow-captured/default/KakaoTalk_chat.pcap.out b/test/results/flow-captured/default/KakaoTalk_chat.pcap.out index 39160a3b9..2c1de5c40 100644 --- a/test/results/flow-captured/default/KakaoTalk_chat.pcap.out +++ b/test/results/flow-captured/default/KakaoTalk_chat.pcap.out @@ -1,5 +1,5 @@ -Flow 26 risky: tcp 10.24.82.188:43581 -> 31.13.68.70:443 +Flow 37 midstream: tcp 10.24.82.188:49217 -> 216.58.220.174:443 Flow 15 risky: tcp 10.24.82.188:35503 -> 173.252.97.2:443 Flow 34 risky: tcp 10.24.82.188:35511 -> 173.252.97.2:443 -Flow 37 midstream: tcp 10.24.82.188:49217 -> 216.58.220.174:443 +Flow 26 risky: tcp 10.24.82.188:43581 -> 31.13.68.70:443 Flow 22 midstream: tcp 31.13.68.73:443 -> 10.24.82.188:47007 diff --git a/test/results/flow-captured/default/KakaoTalk_talk.pcap.out b/test/results/flow-captured/default/KakaoTalk_talk.pcap.out index 56ea1f174..1e735a63c 100644 --- a/test/results/flow-captured/default/KakaoTalk_talk.pcap.out +++ b/test/results/flow-captured/default/KakaoTalk_talk.pcap.out @@ -1,4 +1,4 @@ -Flow 4 risky: tcp 10.24.82.188:48489 -> 203.205.147.215:80 Flow 6 risky: tcp 10.24.82.188:32968 -> 110.76.143.50:8080 Flow 14 midstream: tcp 10.24.82.188:49217 -> 216.58.220.174:443 +Flow 4 risky: tcp 10.24.82.188:48489 -> 203.205.147.215:80 Flow 8 risky: tcp 10.24.82.188:58857 -> 110.76.143.50:9001 diff --git a/test/results/flow-captured/default/alexa-app.pcapng.out b/test/results/flow-captured/default/alexa-app.pcapng.out index 04eafb2eb..621110793 100644 --- a/test/results/flow-captured/default/alexa-app.pcapng.out +++ b/test/results/flow-captured/default/alexa-app.pcapng.out @@ -2,9 +2,16 @@ Flow 14 risky: icmp 172.16.42.1 -> 172.16.42.216 Flow 120 risky: tcp 172.16.42.216:51986 -> 52.84.63.56:80 Flow 129 risky: tcp 172.16.42.216:51995 -> 52.84.63.56:80 Flow 126 risky: tcp 172.16.42.216:51992 -> 52.84.63.56:80 -Flow 45 risky: tcp 172.16.42.216:49589 -> 52.94.232.134:80 Flow 28 risky: tcp 172.16.42.216:45661 -> 52.94.232.134:443 -Flow 142 risky: tcp 172.16.42.216:50799 -> 54.239.28.178:443 +Flow 45 risky: tcp 172.16.42.216:49589 -> 52.94.232.134:80 +Flow 105 risky: tcp 172.16.42.216:40854 -> 54.239.29.253:443 +Flow 107 risky: tcp 172.16.42.216:40856 -> 54.239.29.253:443 +Flow 125 risky: tcp 172.16.42.216:40871 -> 54.239.29.253:443 +Flow 80 risky: tcp 172.16.42.216:45703 -> 52.94.232.134:443 +Flow 87 risky: tcp 172.16.42.216:45710 -> 52.94.232.134:443 +Flow 88 risky: tcp 172.16.42.216:45711 -> 52.94.232.134:443 +Flow 89 risky: tcp 172.16.42.216:45712 -> 52.94.232.134:443 +Flow 65 risky: tcp 172.16.42.216:41691 -> 54.239.29.146:443 Flow 119 risky: tcp 172.16.42.216:51985 -> 52.84.63.56:80 Flow 121 risky: tcp 172.16.42.216:51987 -> 52.84.63.56:80 Flow 122 risky: tcp 172.16.42.216:51988 -> 52.84.63.56:80 @@ -15,14 +22,7 @@ Flow 128 risky: tcp 172.16.42.216:51994 -> 52.84.63.56:80 Flow 130 risky: tcp 172.16.42.216:51996 -> 52.84.63.56:80 Flow 131 risky: tcp 172.16.42.216:51997 -> 52.84.63.56:80 Flow 93 risky: tcp 172.16.42.216:49630 -> 52.94.232.134:80 -Flow 105 risky: tcp 172.16.42.216:40854 -> 54.239.29.253:443 -Flow 107 risky: tcp 172.16.42.216:40856 -> 54.239.29.253:443 -Flow 125 risky: tcp 172.16.42.216:40871 -> 54.239.29.253:443 -Flow 80 risky: tcp 172.16.42.216:45703 -> 52.94.232.134:443 -Flow 87 risky: tcp 172.16.42.216:45710 -> 52.94.232.134:443 -Flow 88 risky: tcp 172.16.42.216:45711 -> 52.94.232.134:443 -Flow 89 risky: tcp 172.16.42.216:45712 -> 52.94.232.134:443 -Flow 65 risky: tcp 172.16.42.216:41691 -> 54.239.29.146:443 -Flow 157 risky: tcp 172.16.42.216:38483 -> 52.85.209.143:443 -Flow 99 risky: tcp 172.16.42.216:44001 -> 176.32.101.52:443 Flow 16 risky: tcp 172.16.42.216:55242 -> 52.85.209.197:443 +Flow 142 risky: tcp 172.16.42.216:50799 -> 54.239.28.178:443 +Flow 99 risky: tcp 172.16.42.216:44001 -> 176.32.101.52:443 +Flow 157 risky: tcp 172.16.42.216:38483 -> 52.85.209.143:443 diff --git a/test/results/flow-captured/default/anyconnect-vpn.pcap.out b/test/results/flow-captured/default/anyconnect-vpn.pcap.out index 996513233..13b9dbbdd 100644 --- a/test/results/flow-captured/default/anyconnect-vpn.pcap.out +++ b/test/results/flow-captured/default/anyconnect-vpn.pcap.out @@ -1,21 +1,21 @@ -Flow 25 midstream: tcp 10.0.0.227:56884 -> 184.25.56.77:80 -Flow 24 midstream: tcp 10.0.0.227:56917 -> 184.25.56.77:80 -Flow 26 risky: udp 10.0.0.227:54851 -> 75.75.76.76:53 -Flow 16 risky: udp 10.0.0.227:63107 -> 75.75.76.76:53 +Flow 15 risky: tcp 10.0.0.227:56919 -> 8.37.102.91:443 +Flow 38 risky: tcp 10.0.0.227:56929 -> 8.37.102.91:443 +Flow 30 risky: tcp 10.0.0.227:56921 -> 8.37.96.194:4287 Flow 34 risky: udp 10.0.0.227:52879 -> 75.75.75.75:53 -Flow 58 risky: udp 10.0.0.227:54107 -> 8.37.102.91:443 +Flow 26 risky: udp 10.0.0.227:54851 -> 75.75.76.76:53 Flow 36 risky: udp 10.0.0.227:57017 -> 75.75.75.75:53 -Flow 35 risky: udp 10.0.0.227:59222 -> 75.75.75.75:53 Flow 33 risky: udp 10.0.0.227:57261 -> 75.75.75.75:53 -Flow 3 risky: tcp 10.0.0.227:56320 -> 10.0.0.149:8009 -Flow 3 midstream: tcp 10.0.0.227:56320 -> 10.0.0.149:8009 Flow 44 risky: tcp 10.0.0.227:56886 -> 17.57.144.116:5223 Flow 44 midstream: tcp 10.0.0.227:56886 -> 17.57.144.116:5223 -Flow 30 risky: tcp 10.0.0.227:56921 -> 8.37.96.194:4287 -Flow 15 risky: tcp 10.0.0.227:56919 -> 8.37.102.91:443 -Flow 38 risky: tcp 10.0.0.227:56929 -> 8.37.102.91:443 +Flow 35 risky: udp 10.0.0.227:59222 -> 75.75.75.75:53 +Flow 16 risky: udp 10.0.0.227:63107 -> 75.75.76.76:53 +Flow 60 not-detected: udp 10.0.0.227:52595 -> 10.0.0.1:192 +Flow 25 midstream: tcp 10.0.0.227:56884 -> 184.25.56.77:80 +Flow 24 midstream: tcp 10.0.0.227:56917 -> 184.25.56.77:80 +Flow 58 risky: udp 10.0.0.227:54107 -> 8.37.102.91:443 +Flow 3 risky: tcp 10.0.0.227:56320 -> 10.0.0.149:8009 +Flow 3 midstream: tcp 10.0.0.227:56320 -> 10.0.0.149:8009 Flow 40 not-detected: tcp 10.0.0.227:56866 -> 10.0.0.151:8060 Flow 40 midstream: tcp 10.0.0.227:56866 -> 10.0.0.151:8060 Flow 62 risky: tcp 10.0.0.227:56954 -> 10.0.0.149:8008 Flow 63 risky: tcp 10.0.0.227:56955 -> 10.0.0.151:8060 -Flow 60 not-detected: udp 10.0.0.227:52595 -> 10.0.0.1:192 diff --git a/test/results/flow-captured/default/bitcoin.pcap.out b/test/results/flow-captured/default/bitcoin.pcap.out index 41b6b1707..02311bb0b 100644 --- a/test/results/flow-captured/default/bitcoin.pcap.out +++ b/test/results/flow-captured/default/bitcoin.pcap.out @@ -1,6 +1,6 @@ Flow 3 midstream: tcp 192.168.1.142:55348 -> 74.89.181.229:8333 Flow 4 midstream: tcp 192.168.1.142:55383 -> 66.68.83.22:8333 Flow 5 midstream: tcp 192.168.1.142:55400 -> 195.218.16.178:8333 -Flow 6 midstream: tcp 192.168.1.142:55487 -> 184.58.165.119:8333 -Flow 1 midstream: tcp 192.168.1.142:55317 -> 188.165.213.169:8333 Flow 2 midstream: tcp 192.168.1.142:55328 -> 69.118.54.122:8333 +Flow 1 midstream: tcp 192.168.1.142:55317 -> 188.165.213.169:8333 +Flow 6 midstream: tcp 192.168.1.142:55487 -> 184.58.165.119:8333 diff --git a/test/results/flow-captured/default/bittorrent.pcap.out b/test/results/flow-captured/default/bittorrent.pcap.out index 05cf521a2..6e5155d66 100644 --- a/test/results/flow-captured/default/bittorrent.pcap.out +++ b/test/results/flow-captured/default/bittorrent.pcap.out @@ -4,34 +4,22 @@ Flow 2 risky: tcp 192.168.1.3:52887 -> 82.57.97.83:53137 Flow 2 midstream: tcp 192.168.1.3:52887 -> 82.57.97.83:53137 Flow 11 risky: tcp 192.168.1.3:52906 -> 82.57.97.83:53137 Flow 11 midstream: tcp 192.168.1.3:52906 -> 82.57.97.83:53137 -Flow 3 midstream: tcp 192.168.1.3:52895 -> 83.216.184.241:51413 -Flow 22 midstream: tcp 192.168.1.3:52927 -> 83.216.184.241:51413 -Flow 21 risky: tcp 192.168.1.3:52922 -> 95.237.193.34:11321 -Flow 21 midstream: tcp 192.168.1.3:52922 -> 95.237.193.34:11321 -Flow 13 risky: tcp 192.168.1.3:52912 -> 151.72.255.163:59928 -Flow 13 midstream: tcp 192.168.1.3:52912 -> 151.72.255.163:59928 -Flow 6 risky: tcp 192.168.1.3:52897 -> 151.26.95.30:22673 -Flow 6 midstream: tcp 192.168.1.3:52897 -> 151.26.95.30:22673 -Flow 12 risky: tcp 192.168.1.3:52911 -> 151.26.95.30:22673 -Flow 12 midstream: tcp 192.168.1.3:52911 -> 151.26.95.30:22673 Flow 20 risky: tcp 192.168.1.3:52921 -> 95.234.159.16:41205 Flow 20 midstream: tcp 192.168.1.3:52921 -> 95.234.159.16:41205 -Flow 23 risky: tcp 192.168.1.3:52926 -> 93.65.249.100:31336 -Flow 23 midstream: tcp 192.168.1.3:52926 -> 93.65.249.100:31336 Flow 24 risky: tcp 192.168.1.3:52925 -> 93.65.227.100:19116 Flow 24 midstream: tcp 192.168.1.3:52925 -> 93.65.227.100:19116 +Flow 21 risky: tcp 192.168.1.3:52922 -> 95.237.193.34:11321 +Flow 21 midstream: tcp 192.168.1.3:52922 -> 95.237.193.34:11321 Flow 9 risky: tcp 192.168.1.3:52902 -> 190.103.195.56:46633 Flow 9 midstream: tcp 192.168.1.3:52902 -> 190.103.195.56:46633 Flow 18 risky: tcp 192.168.1.3:52914 -> 190.103.195.56:46633 Flow 18 midstream: tcp 192.168.1.3:52914 -> 190.103.195.56:46633 -Flow 4 risky: tcp 192.168.1.3:52896 -> 79.53.228.2:14627 -Flow 4 midstream: tcp 192.168.1.3:52896 -> 79.53.228.2:14627 -Flow 14 risky: tcp 192.168.1.3:52909 -> 79.53.228.2:14627 -Flow 14 midstream: tcp 192.168.1.3:52909 -> 79.53.228.2:14627 -Flow 7 risky: tcp 192.168.1.3:52893 -> 79.55.129.22:12097 -Flow 7 midstream: tcp 192.168.1.3:52893 -> 79.55.129.22:12097 -Flow 16 risky: tcp 192.168.1.3:52908 -> 79.55.129.22:12097 -Flow 16 midstream: tcp 192.168.1.3:52908 -> 79.55.129.22:12097 +Flow 3 midstream: tcp 192.168.1.3:52895 -> 83.216.184.241:51413 +Flow 22 midstream: tcp 192.168.1.3:52927 -> 83.216.184.241:51413 +Flow 13 risky: tcp 192.168.1.3:52912 -> 151.72.255.163:59928 +Flow 13 midstream: tcp 192.168.1.3:52912 -> 151.72.255.163:59928 +Flow 23 risky: tcp 192.168.1.3:52926 -> 93.65.249.100:31336 +Flow 23 midstream: tcp 192.168.1.3:52926 -> 93.65.249.100:31336 Flow 19 risky: tcp 192.168.1.3:52917 -> 151.15.48.189:47001 Flow 19 midstream: tcp 192.168.1.3:52917 -> 151.15.48.189:47001 Flow 8 risky: tcp 192.168.1.3:52903 -> 198.100.146.9:60163 @@ -44,3 +32,15 @@ Flow 5 risky: tcp 192.168.1.3:52894 -> 120.62.33.241:39332 Flow 5 midstream: tcp 192.168.1.3:52894 -> 120.62.33.241:39332 Flow 15 risky: tcp 192.168.1.3:52910 -> 120.62.33.241:39332 Flow 15 midstream: tcp 192.168.1.3:52910 -> 120.62.33.241:39332 +Flow 7 risky: tcp 192.168.1.3:52893 -> 79.55.129.22:12097 +Flow 7 midstream: tcp 192.168.1.3:52893 -> 79.55.129.22:12097 +Flow 16 risky: tcp 192.168.1.3:52908 -> 79.55.129.22:12097 +Flow 16 midstream: tcp 192.168.1.3:52908 -> 79.55.129.22:12097 +Flow 4 risky: tcp 192.168.1.3:52896 -> 79.53.228.2:14627 +Flow 4 midstream: tcp 192.168.1.3:52896 -> 79.53.228.2:14627 +Flow 14 risky: tcp 192.168.1.3:52909 -> 79.53.228.2:14627 +Flow 14 midstream: tcp 192.168.1.3:52909 -> 79.53.228.2:14627 +Flow 6 risky: tcp 192.168.1.3:52897 -> 151.26.95.30:22673 +Flow 6 midstream: tcp 192.168.1.3:52897 -> 151.26.95.30:22673 +Flow 12 risky: tcp 192.168.1.3:52911 -> 151.26.95.30:22673 +Flow 12 midstream: tcp 192.168.1.3:52911 -> 151.26.95.30:22673 diff --git a/test/results/flow-captured/default/custom_risk_mask.pcapng.out b/test/results/flow-captured/default/custom_risk_mask.pcapng.out index 066b1921b..44af8cd81 100644 --- a/test/results/flow-captured/default/custom_risk_mask.pcapng.out +++ b/test/results/flow-captured/default/custom_risk_mask.pcapng.out @@ -1,2 +1,2 @@ -Flow 1 risky: udp fe80::7c0:e74e:87c3:5d93:6741 -> ff02::1:3:5355 Flow 2 risky: udp fe80::356b:e047:3695:f741:16765 -> ff02::1:3:5355 +Flow 1 risky: udp fe80::7c0:e74e:87c3:5d93:6741 -> ff02::1:3:5355 diff --git a/test/results/flow-captured/default/dcerpc.pcap.out b/test/results/flow-captured/default/dcerpc.pcap.out index c81c9b8b6..db3f52f10 100644 --- a/test/results/flow-captured/default/dcerpc.pcap.out +++ b/test/results/flow-captured/default/dcerpc.pcap.out @@ -1,4 +1,4 @@ -Flow 4 risky: udp 192.168.1.11:49154 -> 192.168.1.20:49162 -Flow 2 risky: udp 192.168.1.20:49161 -> 192.168.1.11:49155 Flow 1 risky: udp 192.168.1.11:49155 -> 192.168.1.20:34964 Flow 3 risky: udp 192.168.1.20:49162 -> 192.168.1.11:34964 +Flow 4 risky: udp 192.168.1.11:49154 -> 192.168.1.20:49162 +Flow 2 risky: udp 192.168.1.20:49161 -> 192.168.1.11:49155 diff --git a/test/results/flow-captured/default/dns_fragmented.pcap.out b/test/results/flow-captured/default/dns_fragmented.pcap.out index 31e40f97c..efa654bb2 100644 --- a/test/results/flow-captured/default/dns_fragmented.pcap.out +++ b/test/results/flow-captured/default/dns_fragmented.pcap.out @@ -1,9 +1,9 @@ -Flow 1 risky: udp 172.217.40.76:56680 -> 193.24.227.238:53 -Flow 3 risky: udp 2a00:1450:4013:c06::105:63369 -> 2001:470:765b::a25:53:53 Flow 7 risky: udp 2a00:1450:4013:c05::10e:34944 -> 2001:470:765b::a25:53:53 +Flow 2 risky: udp 2a00:1450:4013:c03::10a:46433 -> 2001:470:765b::a25:53:53 Flow 4 risky: udp 173.194.169.104:59464 -> 193.24.227.238:53 -Flow 6 risky: udp 74.125.47.136:59330 -> 193.24.227.238:53 +Flow 1 risky: udp 172.217.40.76:56680 -> 193.24.227.238:53 Flow 5 risky: udp 2a00:1450:400c:c00::106:54430 -> 2001:470:765b::a25:53:53 -Flow 2 risky: udp 2a00:1450:4013:c03::10a:46433 -> 2001:470:765b::a25:53:53 -Flow 16 risky: udp 2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb:55729 -> 2001:470:765b::a25:53:53 +Flow 3 risky: udp 2a00:1450:4013:c06::105:63369 -> 2001:470:765b::a25:53:53 +Flow 6 risky: udp 74.125.47.136:59330 -> 193.24.227.238:53 Flow 17 risky: udp 194.247.5.6:51791 -> 193.24.227.238:53 +Flow 16 risky: udp 2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb:55729 -> 2001:470:765b::a25:53:53 diff --git a/test/results/flow-captured/default/dropbox.pcap.out b/test/results/flow-captured/default/dropbox.pcap.out index 1162dcba4..d41e5af18 100644 --- a/test/results/flow-captured/default/dropbox.pcap.out +++ b/test/results/flow-captured/default/dropbox.pcap.out @@ -1,5 +1,5 @@ -Flow 7 risky: udp 192.168.1.105:50789 -> 192.168.1.254:53 Flow 6 risky: udp 192.168.1.105:49112 -> 192.168.1.254:53 +Flow 7 risky: udp 192.168.1.105:50789 -> 192.168.1.254:53 Flow 5 risky: udp 192.168.1.105:55407 -> 192.168.1.254:53 Flow 11 risky: udp 192.168.1.105:33189 -> 192.168.1.254:53 Flow 8 risky: udp 192.168.1.105:36173 -> 192.168.1.254:53 diff --git a/test/results/flow-captured/default/dtls_certificate_fragments.pcap.out b/test/results/flow-captured/default/dtls_certificate_fragments.pcap.out index 3da344ebd..e08f61716 100644 --- a/test/results/flow-captured/default/dtls_certificate_fragments.pcap.out +++ b/test/results/flow-captured/default/dtls_certificate_fragments.pcap.out @@ -1,2 +1,2 @@ -Flow 1 risky: udp 10.186.198.149:39347 -> 35.210.59.134:44443 Flow 2 risky: udp 192.168.1.26:43594 -> 104.153.87.149:50001 +Flow 1 risky: udp 10.186.198.149:39347 -> 35.210.59.134:44443 diff --git a/test/results/flow-captured/default/ethernetIP.pcap.out b/test/results/flow-captured/default/ethernetIP.pcap.out index 8ceec982c..55a6737b9 100644 --- a/test/results/flow-captured/default/ethernetIP.pcap.out +++ b/test/results/flow-captured/default/ethernetIP.pcap.out @@ -1,4 +1,4 @@ Flow 1 midstream: tcp 141.81.0.10:50275 -> 141.81.0.83:44818 -Flow 4 midstream: tcp 141.81.0.10:62717 -> 141.81.0.23:44818 Flow 2 midstream: tcp 141.81.0.63:44818 -> 141.81.0.10:52593 Flow 3 midstream: tcp 141.81.0.10:52594 -> 141.81.0.43:44818 +Flow 4 midstream: tcp 141.81.0.10:62717 -> 141.81.0.23:44818 diff --git a/test/results/flow-captured/default/fix.pcap.out b/test/results/flow-captured/default/fix.pcap.out index f2482baf9..99f3dadf7 100644 --- a/test/results/flow-captured/default/fix.pcap.out +++ b/test/results/flow-captured/default/fix.pcap.out @@ -3,10 +3,10 @@ Flow 2 midstream: tcp 8.17.22.31:4000 -> 192.168.0.20:47968 Flow 1 midstream: tcp 8.17.22.31:4000 -> 192.168.0.20:43594 Flow 5 midstream: tcp 208.245.107.3:4000 -> 192.168.0.20:45584 Flow 8 midstream: tcp 8.17.22.31:4000 -> 192.168.0.20:40918 -Flow 12 midstream: tcp 8.17.22.31:4000 -> 192.168.0.20:40928 -Flow 11 midstream: tcp 217.192.86.32:4000 -> 192.168.0.20:53330 Flow 4 midstream: tcp 8.17.22.31:4000 -> 192.168.0.20:47952 Flow 6 midstream: tcp 8.17.22.31:4000 -> 192.168.0.20:47962 Flow 9 midstream: tcp 208.245.107.3:4000 -> 192.168.0.20:38646 Flow 7 midstream: tcp 208.245.107.3:4000 -> 192.168.0.20:38652 Flow 10 midstream: tcp 208.245.107.3:4000 -> 192.168.0.20:39094 +Flow 11 midstream: tcp 217.192.86.32:4000 -> 192.168.0.20:53330 +Flow 12 midstream: tcp 8.17.22.31:4000 -> 192.168.0.20:40928 diff --git a/test/results/flow-captured/default/fuzz-2006-06-26-2594.pcap.out b/test/results/flow-captured/default/fuzz-2006-06-26-2594.pcap.out index e6f3619fb..b9ee99ef8 100644 --- a/test/results/flow-captured/default/fuzz-2006-06-26-2594.pcap.out +++ b/test/results/flow-captured/default/fuzz-2006-06-26-2594.pcap.out @@ -2,8 +2,8 @@ Flow 17 risky: udp 192.168.1.2:138 -> 192.168.1.251:138 Flow 22 risky: udp 192.168.1.2:2719 -> 192.168.1.1:53 Flow 41 not-detected: tcp 192.168.1.2:2721 -> 147.234.1.253:58999 Flow 41 midstream: tcp 192.168.1.2:2721 -> 147.234.1.253:58999 -Flow 9 not-detected: udp 192.168.1.2:2597 -> 192.168.1.1:29440 Flow 5 not-detected: udp 192.168.1.2:2712 -> 192.168.1.1:49973 +Flow 9 not-detected: udp 192.168.1.2:2597 -> 192.168.1.1:29440 Flow 15 not-detected: udp 192.168.1.1:9587 -> 192.168.1.2:156 Flow 47 not-detected: udp 192.168.1.2:2724 -> 192.168.1.1:9587 Flow 55 not-detected: udp 192.168.1.2:43690 -> 192.170.170.170:43690 @@ -47,22 +47,22 @@ Flow 215 not-detected: udp 192.168.1.2:2808 -> 192.168.1.1:38709 Flow 166 not-detected: 0 192.168.1.1 -> 192.168.1.2 Flow 243 risky: udp 192.168.1.2:138 -> 192.168.1.255:138 Flow 244 risky: udp 192.168.1.2:2826 -> 192.168.1.1:53 -Flow 33 not-detected: tcp 147.234.1.253:1045 -> 192.168.1.2:2720 -Flow 33 midstream: tcp 147.234.1.253:1045 -> 192.168.1.2:2720 -Flow 29 not-detected: tcp 147.234.1.170:43690 -> 170.170.170.170:43690 -Flow 205 not-detected: 0 192.168.1.2 -> 212.242.33.35 -Flow 249 risky: udp 192.168.1.1:53 -> 192.168.1.2:2572 -Flow 42 not-detected: tcp 147.234.1.253:58999 -> 192.232.1.2:2721 -Flow 42 midstream: tcp 147.234.1.253:58999 -> 192.232.1.2:2721 Flow 39 not-detected: tcp 192.168.1.6:2721 -> 147.234.1.253:58999 -Flow 254 risky: udp 192.168.1.2:2830 -> 192.168.1.1:53 Flow 40 not-detected: tcp 37.115.0.253:58999 -> 192.168.1.2:2721 -Flow 37 not-detected: 170 170.170.170.170 -> 170.170.170.170 +Flow 205 not-detected: 0 192.168.1.2 -> 212.242.33.35 +Flow 28 not-detected: tcp 147.234.1.253:120 -> 192.168.1.2:2720 +Flow 28 midstream: tcp 147.234.1.253:120 -> 192.168.1.2:2720 +Flow 33 not-detected: tcp 147.234.1.253:1045 -> 192.168.1.2:2720 +Flow 33 midstream: tcp 147.234.1.253:1045 -> 192.168.1.2:2720 Flow 30 not-detected: tcp 147.234.1.249:2069 -> 192.168.1.2:2720 Flow 30 midstream: tcp 147.234.1.249:2069 -> 192.168.1.2:2720 Flow 237 not-detected: udp 81.168.1.2:30000 -> 212.242.33.36:40392 -Flow 28 not-detected: tcp 147.234.1.253:120 -> 192.168.1.2:2720 -Flow 28 midstream: tcp 147.234.1.253:120 -> 192.168.1.2:2720 Flow 233 not-detected: udp 192.168.1.3:30000 -> 212.242.33.36:40392 Flow 236 not-detected: udp 192.168.1.2:30000 -> 214.242.33.36:40392 Flow 234 not-detected: udp 192.168.1.2:30000 -> 37.115.0.36:40392 +Flow 42 not-detected: tcp 147.234.1.253:58999 -> 192.232.1.2:2721 +Flow 42 midstream: tcp 147.234.1.253:58999 -> 192.232.1.2:2721 +Flow 37 not-detected: 170 170.170.170.170 -> 170.170.170.170 +Flow 249 risky: udp 192.168.1.1:53 -> 192.168.1.2:2572 +Flow 254 risky: udp 192.168.1.2:2830 -> 192.168.1.1:53 +Flow 29 not-detected: tcp 147.234.1.170:43690 -> 170.170.170.170:43690 diff --git a/test/results/flow-captured/default/fuzz-2006-09-29-28586.pcap.out b/test/results/flow-captured/default/fuzz-2006-09-29-28586.pcap.out index 31d61ed01..c87403b79 100644 --- a/test/results/flow-captured/default/fuzz-2006-09-29-28586.pcap.out +++ b/test/results/flow-captured/default/fuzz-2006-09-29-28586.pcap.out @@ -1,6 +1,3 @@ -Flow 5 risky: tcp 172.20.3.13:53132 -> 172.20.3.5:80 -Flow 34 risky: tcp 172.20.3.13:53136 -> 172.20.3.5:80 -Flow 34 midstream: tcp 172.20.3.13:53136 -> 172.20.3.5:80 Flow 39 not-detected: 115 172.20.3.13 -> 172.20.3.5 Flow 24 not-detected: tcp 170.170.170.170:43690 -> 170.170.170.170:43690 Flow 11 risky: tcp 172.20.3.5:2602 -> 172.20.3.13:80 @@ -10,3 +7,6 @@ Flow 3 midstream: tcp 172.20.3.13:81 -> 172.20.3.5:2601 Flow 18 risky: tcp 172.20.3.5:2604 -> 172.20.3.13:80 Flow 27 risky: tcp 172.20.3.5:2606 -> 172.20.3.13:80 Flow 10 not-detected: 170 170.170.170.170 -> 170.170.170.170 +Flow 5 risky: tcp 172.20.3.13:53132 -> 172.20.3.5:80 +Flow 34 risky: tcp 172.20.3.13:53136 -> 172.20.3.5:80 +Flow 34 midstream: tcp 172.20.3.13:53136 -> 172.20.3.5:80 diff --git a/test/results/flow-captured/default/fuzz-2020-02-16-11740.pcap.out b/test/results/flow-captured/default/fuzz-2020-02-16-11740.pcap.out index 589d52369..e9afe7dac 100644 --- a/test/results/flow-captured/default/fuzz-2020-02-16-11740.pcap.out +++ b/test/results/flow-captured/default/fuzz-2020-02-16-11740.pcap.out @@ -8,12 +8,12 @@ Flow 25 not-detected: udp 198.226.25.53:1895 -> 10.12.64.30:29200 Flow 17 not-detected: 88 198.226.25.53 -> 10.12.64.30 Flow 18 not-detected: 254 10.12.64.30 -> 198.226.25.53 Flow 23 not-detected: 85 198.226.25.62 -> 10.12.64.30 -Flow 43 not-detected: udp 198.226.25.53:1965 -> 10.12.64.30:29200 Flow 47 not-detected: udp 198.226.25.53:43690 -> 10.12.170.170:43690 +Flow 43 not-detected: udp 198.226.25.53:1965 -> 10.12.64.30:29200 Flow 44 not-detected: 0 10.12.64.30 -> 198.226.25.53 -Flow 64 not-detected: udp 198.226.25.53:3860 -> 14.12.64.30:29200 Flow 68 not-detected: udp 198.226.25.53:43028 -> 10.12.64.30:29200 +Flow 64 not-detected: udp 198.226.25.53:3860 -> 14.12.64.30:29200 Flow 40 not-detected: 170 170.170.170.170 -> 170.170.170.170 -Flow 74 not-detected: udp 198.226.25.53:1814 -> 10.12.64.30:29200 Flow 75 not-detected: udp 57.12.64.30:29200 -> 198.226.25.53:28948 +Flow 74 not-detected: udp 198.226.25.53:1814 -> 10.12.64.30:29200 Flow 79 not-detected: 37 198.226.25.53 -> 10.12.64.30 diff --git a/test/results/flow-captured/default/gnutella.pcap.out b/test/results/flow-captured/default/gnutella.pcap.out index 56fadb54c..09fb39805 100644 --- a/test/results/flow-captured/default/gnutella.pcap.out +++ b/test/results/flow-captured/default/gnutella.pcap.out @@ -3,759 +3,759 @@ Flow 239 risky: tcp 10.0.2.15:50285 -> 75.133.101.93:52367 Flow 238 risky: tcp 10.0.2.15:50284 -> 104.156.226.72:53258 Flow 288 risky: tcp 10.0.2.15:50312 -> 104.238.172.250:23548 Flow 276 risky: tcp 10.0.2.15:50300 -> 188.61.52.183:11852 -Flow 134 risky: udp 10.0.2.15:28681 -> 78.231.73.14:6346 +Flow 117 risky: udp 10.0.2.15:28681 -> 200.120.243.143:6346 +Flow 135 risky: udp 10.0.2.15:28681 -> 193.250.99.158:6346 +Flow 130 risky: udp 10.0.2.15:28681 -> 119.224.95.97:46356 +Flow 137 risky: udp 10.0.2.15:28681 -> 82.65.70.197:21693 +Flow 108 risky: udp 10.0.2.15:28681 -> 112.119.242.110:7922 +Flow 103 risky: udp 10.0.2.15:28681 -> 220.134.167.82:5820 Flow 128 risky: udp 10.0.2.15:28681 -> 77.141.219.27:37580 +Flow 85 risky: udp 10.0.2.15:28681 -> 85.138.20.110:6346 +Flow 136 risky: udp 10.0.2.15:28681 -> 80.236.247.120:16047 Flow 114 risky: udp 10.0.2.15:28681 -> 86.23.75.69:6346 -Flow 88 risky: udp 10.0.2.15:28681 -> 81.50.24.2:17874 -Flow 96 risky: udp 10.0.2.15:28681 -> 88.160.214.137:6346 -Flow 118 risky: udp 10.0.2.15:28681 -> 5.180.62.100:46385 -Flow 100 risky: udp 10.0.2.15:28681 -> 220.133.122.217:23458 -Flow 117 risky: udp 10.0.2.15:28681 -> 200.120.243.143:6346 Flow 115 risky: udp 10.0.2.15:28681 -> 154.3.42.104:11804 -Flow 101 risky: udp 10.0.2.15:28681 -> 123.205.126.102:5193 +Flow 126 risky: udp 10.0.2.15:28681 -> 91.69.159.133:28000 +Flow 107 risky: udp 10.0.2.15:28681 -> 202.151.63.59:7624 +Flow 96 risky: udp 10.0.2.15:28681 -> 88.160.214.137:6346 Flow 98 risky: udp 10.0.2.15:28681 -> 203.222.14.170:23332 -Flow 131 risky: udp 10.0.2.15:28681 -> 86.225.140.186:6346 -Flow 111 risky: udp 10.0.2.15:28681 -> 90.65.141.157:6346 Flow 106 risky: udp 10.0.2.15:28681 -> 114.39.154.69:4832 +Flow 125 risky: udp 10.0.2.15:28681 -> 83.92.178.182:57302 +Flow 104 risky: udp 10.0.2.15:28681 -> 42.98.115.128:23458 Flow 139 risky: udp 10.0.2.15:28681 -> 165.169.226.142:6346 -Flow 141 risky: udp 10.0.2.15:28681 -> 172.97.199.14:6346 -Flow 126 risky: udp 10.0.2.15:28681 -> 91.69.159.133:28000 -Flow 136 risky: udp 10.0.2.15:28681 -> 80.236.247.120:16047 -Flow 86 risky: udp 10.0.2.15:28681 -> 74.210.244.72:6346 -Flow 85 risky: udp 10.0.2.15:28681 -> 85.138.20.110:6346 -Flow 135 risky: udp 10.0.2.15:28681 -> 193.250.99.158:6346 Flow 127 risky: udp 10.0.2.15:28681 -> 176.191.49.159:1024 Flow 112 risky: udp 10.0.2.15:28681 -> 36.239.213.146:21750 -Flow 125 risky: udp 10.0.2.15:28681 -> 83.92.178.182:57302 +Flow 113 risky: udp 10.0.2.15:28681 -> 105.101.132.146:57746 +Flow 138 risky: udp 10.0.2.15:28681 -> 167.114.170.156:23844 Flow 116 risky: udp 10.0.2.15:28681 -> 124.44.190.145:10170 -Flow 133 risky: udp 10.0.2.15:28681 -> 91.175.220.161:15721 -Flow 99 risky: udp 10.0.2.15:28681 -> 114.38.9.82:24223 +Flow 111 risky: udp 10.0.2.15:28681 -> 90.65.141.157:6346 Flow 124 risky: udp 10.0.2.15:28681 -> 170.254.19.6:24180 -Flow 130 risky: udp 10.0.2.15:28681 -> 119.224.95.97:46356 -Flow 107 risky: udp 10.0.2.15:28681 -> 202.151.63.59:7624 -Flow 129 risky: udp 10.0.2.15:28681 -> 176.138.50.179:29411 -Flow 103 risky: udp 10.0.2.15:28681 -> 220.134.167.82:5820 -Flow 97 risky: udp 10.0.2.15:28681 -> 24.78.134.188:49046 -Flow 104 risky: udp 10.0.2.15:28681 -> 42.98.115.128:23458 -Flow 137 risky: udp 10.0.2.15:28681 -> 82.65.70.197:21693 -Flow 109 risky: udp 10.0.2.15:28681 -> 88.169.2.153:52414 Flow 140 risky: udp 10.0.2.15:28681 -> 77.197.111.186:6346 -Flow 102 risky: udp 10.0.2.15:28681 -> 218.164.39.233:20855 -Flow 108 risky: udp 10.0.2.15:28681 -> 112.119.242.110:7922 -Flow 113 risky: udp 10.0.2.15:28681 -> 105.101.132.146:57746 +Flow 110 risky: udp 10.0.2.15:28681 -> 195.132.75.56:56009 +Flow 100 risky: udp 10.0.2.15:28681 -> 220.133.122.217:23458 +Flow 101 risky: udp 10.0.2.15:28681 -> 123.205.126.102:5193 +Flow 118 risky: udp 10.0.2.15:28681 -> 5.180.62.100:46385 +Flow 86 risky: udp 10.0.2.15:28681 -> 74.210.244.72:6346 +Flow 133 risky: udp 10.0.2.15:28681 -> 91.175.220.161:15721 Flow 132 risky: udp 10.0.2.15:28681 -> 79.86.173.45:6346 +Flow 109 risky: udp 10.0.2.15:28681 -> 88.169.2.153:52414 +Flow 102 risky: udp 10.0.2.15:28681 -> 218.164.39.233:20855 +Flow 88 risky: udp 10.0.2.15:28681 -> 81.50.24.2:17874 +Flow 131 risky: udp 10.0.2.15:28681 -> 86.225.140.186:6346 +Flow 141 risky: udp 10.0.2.15:28681 -> 172.97.199.14:6346 +Flow 129 risky: udp 10.0.2.15:28681 -> 176.138.50.179:29411 Flow 87 risky: udp 10.0.2.15:28681 -> 92.131.85.245:31743 -Flow 110 risky: udp 10.0.2.15:28681 -> 195.132.75.56:56009 Flow 105 risky: udp 10.0.2.15:28681 -> 219.85.11.85:10722 -Flow 138 risky: udp 10.0.2.15:28681 -> 167.114.170.156:23844 -Flow 170 risky: udp 10.0.2.15:28681 -> 67.193.8.52:38584 -Flow 166 risky: udp 10.0.2.15:28681 -> 90.59.253.186:15555 -Flow 183 risky: udp 10.0.2.15:28681 -> 91.172.15.182:37829 -Flow 184 risky: udp 10.0.2.15:28681 -> 86.239.62.213:6346 +Flow 134 risky: udp 10.0.2.15:28681 -> 78.231.73.14:6346 +Flow 99 risky: udp 10.0.2.15:28681 -> 114.38.9.82:24223 +Flow 97 risky: udp 10.0.2.15:28681 -> 24.78.134.188:49046 +Flow 192 risky: udp 10.0.2.15:28681 -> 92.8.59.80:35192 +Flow 214 risky: udp 10.0.2.15:28681 -> 91.169.215.227:26820 +Flow 173 risky: udp 10.0.2.15:28681 -> 121.99.222.36:44988 +Flow 160 risky: udp 10.0.2.15:28681 -> 83.150.49.35:32448 +Flow 210 risky: udp 10.0.2.15:28681 -> 41.100.120.146:12838 +Flow 200 risky: udp 10.0.2.15:28681 -> 138.199.16.123:52993 +Flow 163 risky: udp 10.0.2.15:28681 -> 88.126.160.158:6346 Flow 196 risky: udp 10.0.2.15:28681 -> 88.127.72.106:6346 -Flow 195 risky: udp 10.0.2.15:28681 -> 177.231.151.16:6346 -Flow 219 risky: udp 10.0.2.15:28681 -> 76.30.86.144:53821 -Flow 217 risky: udp 10.0.2.15:28681 -> 126.117.45.151:19323 -Flow 155 risky: udp 10.0.2.15:28681 -> 88.168.182.103:6346 -Flow 198 risky: udp 10.0.2.15:28681 -> 58.182.171.50:15180 Flow 191 risky: udp 10.0.2.15:28681 -> 190.153.143.54:65535 -Flow 172 risky: udp 10.0.2.15:28681 -> 87.69.142.133:15471 -Flow 192 risky: udp 10.0.2.15:28681 -> 92.8.59.80:35192 -Flow 181 risky: udp 10.0.2.15:28681 -> 66.177.5.135:6346 +Flow 199 risky: udp 10.0.2.15:28681 -> 114.73.129.26:53585 +Flow 212 risky: udp 10.0.2.15:28681 -> 36.233.3.223:12848 +Flow 156 risky: udp 10.0.2.15:28681 -> 86.244.228.86:10131 +Flow 185 risky: udp 10.0.2.15:28681 -> 109.132.196.58:6346 +Flow 188 risky: udp 10.0.2.15:28681 -> 83.134.107.32:38836 +Flow 202 risky: udp 10.0.2.15:28681 -> 176.134.139.39:6346 Flow 162 risky: udp 10.0.2.15:28681 -> 88.123.159.111:44729 -Flow 214 risky: udp 10.0.2.15:28681 -> 91.169.215.227:26820 -Flow 193 risky: udp 10.0.2.15:28681 -> 188.44.126.74:54633 Flow 169 risky: udp 10.0.2.15:28681 -> 91.162.52.93:34799 Flow 187 risky: udp 10.0.2.15:28681 -> 92.88.92.56:21009 +Flow 164 risky: udp 10.0.2.15:28681 -> 142.197.219.85:26234 +Flow 186 risky: udp 10.0.2.15:28681 -> 91.182.44.202:30277 +Flow 216 risky: udp 10.0.2.15:28681 -> 212.68.248.153:27223 +Flow 204 risky: udp 10.0.2.15:28681 -> 84.126.240.32:45313 +Flow 177 risky: udp 10.0.2.15:28681 -> 69.157.183.106:6346 +Flow 205 risky: udp 10.0.2.15:28681 -> 96.29.197.138:6346 +Flow 159 risky: udp 10.0.2.15:28681 -> 176.163.231.160:6346 +Flow 171 risky: udp 10.0.2.15:28681 -> 196.217.132.111:25394 +Flow 174 risky: udp 10.0.2.15:28681 -> 196.74.159.56:29271 +Flow 154 risky: udp 10.0.2.15:28681 -> 174.115.111.224:51984 +Flow 158 risky: udp 10.0.2.15:28681 -> 118.166.226.70:6346 +Flow 183 risky: udp 10.0.2.15:28681 -> 91.172.15.182:37829 +Flow 217 risky: udp 10.0.2.15:28681 -> 126.117.45.151:19323 +Flow 155 risky: udp 10.0.2.15:28681 -> 88.168.182.103:6346 Flow 190 risky: udp 10.0.2.15:28681 -> 165.169.195.227:6346 +Flow 178 risky: udp 10.0.2.15:28681 -> 83.46.253.7:6346 +Flow 181 risky: udp 10.0.2.15:28681 -> 66.177.5.135:6346 +Flow 209 risky: udp 10.0.2.15:28681 -> 91.179.98.234:6346 +Flow 179 risky: udp 10.0.2.15:28681 -> 178.51.146.115:6346 +Flow 213 risky: udp 10.0.2.15:28681 -> 5.180.62.37:6346 Flow 206 risky: udp 10.0.2.15:28681 -> 213.166.132.204:11194 -Flow 203 risky: udp 10.0.2.15:28681 -> 120.156.204.38:54832 -Flow 199 risky: udp 10.0.2.15:28681 -> 114.73.129.26:53585 -Flow 207 risky: udp 10.0.2.15:28681 -> 81.242.191.215:6346 +Flow 194 risky: udp 10.0.2.15:28681 -> 176.150.126.156:16471 +Flow 170 risky: udp 10.0.2.15:28681 -> 67.193.8.52:38584 Flow 208 risky: udp 10.0.2.15:28681 -> 81.249.64.215:25058 -Flow 173 risky: udp 10.0.2.15:28681 -> 121.99.222.36:44988 -Flow 180 risky: udp 10.0.2.15:28681 -> 66.131.24.72:30711 -Flow 212 risky: udp 10.0.2.15:28681 -> 36.233.3.223:12848 Flow 197 risky: udp 10.0.2.15:28681 -> 208.92.106.151:32476 -Flow 168 risky: udp 10.0.2.15:28681 -> 89.157.59.43:56919 -Flow 156 risky: udp 10.0.2.15:28681 -> 86.244.228.86:10131 -Flow 215 risky: udp 10.0.2.15:28681 -> 78.159.27.22:17563 -Flow 176 risky: udp 10.0.2.15:28681 -> 41.99.164.4:6346 -Flow 164 risky: udp 10.0.2.15:28681 -> 142.197.219.85:26234 -Flow 157 risky: udp 10.0.2.15:28681 -> 86.227.162.150:6346 -Flow 209 risky: udp 10.0.2.15:28681 -> 91.179.98.234:6346 Flow 189 risky: udp 10.0.2.15:28681 -> 115.195.105.243:6346 -Flow 159 risky: udp 10.0.2.15:28681 -> 176.163.231.160:6346 -Flow 179 risky: udp 10.0.2.15:28681 -> 178.51.146.115:6346 -Flow 186 risky: udp 10.0.2.15:28681 -> 91.182.44.202:30277 -Flow 213 risky: udp 10.0.2.15:28681 -> 5.180.62.37:6346 +Flow 175 risky: udp 10.0.2.15:28681 -> 115.69.62.99:6346 +Flow 201 risky: udp 10.0.2.15:28681 -> 85.170.209.214:46210 +Flow 215 risky: udp 10.0.2.15:28681 -> 78.159.27.22:17563 Flow 167 risky: udp 10.0.2.15:28681 -> 93.29.107.176:20363 -Flow 171 risky: udp 10.0.2.15:28681 -> 196.217.132.111:25394 -Flow 160 risky: udp 10.0.2.15:28681 -> 83.150.49.35:32448 -Flow 174 risky: udp 10.0.2.15:28681 -> 196.74.159.56:29271 -Flow 185 risky: udp 10.0.2.15:28681 -> 109.132.196.58:6346 -Flow 165 risky: udp 10.0.2.15:28681 -> 86.75.43.182:43502 Flow 161 risky: udp 10.0.2.15:28681 -> 213.120.26.86:29946 -Flow 188 risky: udp 10.0.2.15:28681 -> 83.134.107.32:38836 -Flow 177 risky: udp 10.0.2.15:28681 -> 69.157.183.106:6346 -Flow 205 risky: udp 10.0.2.15:28681 -> 96.29.197.138:6346 -Flow 175 risky: udp 10.0.2.15:28681 -> 115.69.62.99:6346 -Flow 182 risky: udp 10.0.2.15:28681 -> 73.3.103.37:35589 -Flow 210 risky: udp 10.0.2.15:28681 -> 41.100.120.146:12838 Flow 218 risky: udp 10.0.2.15:28681 -> 176.155.52.115:53956 +Flow 219 risky: udp 10.0.2.15:28681 -> 76.30.86.144:53821 +Flow 198 risky: udp 10.0.2.15:28681 -> 58.182.171.50:15180 +Flow 203 risky: udp 10.0.2.15:28681 -> 120.156.204.38:54832 +Flow 165 risky: udp 10.0.2.15:28681 -> 86.75.43.182:43502 Flow 211 risky: udp 10.0.2.15:28681 -> 186.93.139.92:6346 -Flow 200 risky: udp 10.0.2.15:28681 -> 138.199.16.123:52993 -Flow 154 risky: udp 10.0.2.15:28681 -> 174.115.111.224:51984 -Flow 201 risky: udp 10.0.2.15:28681 -> 85.170.209.214:46210 -Flow 194 risky: udp 10.0.2.15:28681 -> 176.150.126.156:16471 -Flow 178 risky: udp 10.0.2.15:28681 -> 83.46.253.7:6346 -Flow 163 risky: udp 10.0.2.15:28681 -> 88.126.160.158:6346 -Flow 216 risky: udp 10.0.2.15:28681 -> 212.68.248.153:27223 -Flow 158 risky: udp 10.0.2.15:28681 -> 118.166.226.70:6346 -Flow 204 risky: udp 10.0.2.15:28681 -> 84.126.240.32:45313 -Flow 202 risky: udp 10.0.2.15:28681 -> 176.134.139.39:6346 +Flow 166 risky: udp 10.0.2.15:28681 -> 90.59.253.186:15555 +Flow 180 risky: udp 10.0.2.15:28681 -> 66.131.24.72:30711 +Flow 168 risky: udp 10.0.2.15:28681 -> 89.157.59.43:56919 +Flow 176 risky: udp 10.0.2.15:28681 -> 41.99.164.4:6346 +Flow 157 risky: udp 10.0.2.15:28681 -> 86.227.162.150:6346 +Flow 195 risky: udp 10.0.2.15:28681 -> 177.231.151.16:6346 +Flow 172 risky: udp 10.0.2.15:28681 -> 87.69.142.133:15471 +Flow 193 risky: udp 10.0.2.15:28681 -> 188.44.126.74:54633 +Flow 184 risky: udp 10.0.2.15:28681 -> 86.239.62.213:6346 +Flow 207 risky: udp 10.0.2.15:28681 -> 81.242.191.215:6346 +Flow 182 risky: udp 10.0.2.15:28681 -> 73.3.103.37:35589 Flow 93 risky: tcp 10.0.2.15:50248 -> 109.214.154.216:6346 +Flow 259 risky: udp 10.0.2.15:28681 -> 103.232.107.100:43508 +Flow 253 risky: udp 10.0.2.15:28681 -> 193.37.255.130:61616 +Flow 260 risky: udp 10.0.2.15:28681 -> 46.128.114.107:6578 +Flow 318 risky: udp 10.0.2.15:28681 -> 173.183.183.110:59920 +Flow 315 risky: udp 10.0.2.15:28681 -> 92.217.84.16:20223 +Flow 251 risky: udp 10.0.2.15:28681 -> 185.203.218.92:56962 +Flow 250 risky: udp 10.0.2.15:28681 -> 51.68.153.214:26253 +Flow 314 risky: udp 10.0.2.15:28681 -> 71.237.202.91:16117 +Flow 316 risky: udp 10.0.2.15:28681 -> 94.54.66.82:63637 +Flow 255 risky: udp 10.0.2.15:28681 -> 80.61.221.246:30577 +Flow 264 risky: udp 10.0.2.15:28681 -> 95.10.205.67:11603 +Flow 256 risky: udp 10.0.2.15:28681 -> 96.246.156.126:50297 Flow 247 risky: udp 10.0.2.15:28681 -> 181.84.178.16:60262 -Flow 307 risky: udp 10.0.2.15:28681 -> 72.201.208.57:38617 +Flow 305 risky: udp 10.0.2.15:28681 -> 88.168.175.31:6346 +Flow 257 risky: udp 10.0.2.15:28681 -> 82.181.251.218:36368 +Flow 261 risky: udp 10.0.2.15:28681 -> 60.241.48.194:21301 +Flow 252 risky: udp 10.0.2.15:28681 -> 72.140.120.41:47739 Flow 309 risky: udp 10.0.2.15:28681 -> 47.220.186.140:27641 -Flow 254 risky: udp 10.0.2.15:28681 -> 88.120.73.215:24562 +Flow 246 risky: udp 10.0.2.15:28681 -> 96.65.68.194:35481 +Flow 248 risky: udp 10.0.2.15:28681 -> 66.30.221.181:12012 Flow 258 risky: udp 10.0.2.15:28681 -> 24.26.216.95:13889 -Flow 315 risky: udp 10.0.2.15:28681 -> 92.217.84.16:20223 -Flow 305 risky: udp 10.0.2.15:28681 -> 88.168.175.31:6346 -Flow 310 risky: udp 10.0.2.15:28681 -> 118.240.69.199:6348 Flow 306 risky: udp 10.0.2.15:28681 -> 41.249.63.200:22582 +Flow 254 risky: udp 10.0.2.15:28681 -> 88.120.73.215:24562 +Flow 312 risky: udp 10.0.2.15:28681 -> 24.167.201.53:47282 +Flow 307 risky: udp 10.0.2.15:28681 -> 72.201.208.57:38617 Flow 265 risky: udp 10.0.2.15:28681 -> 203.220.198.244:1194 -Flow 318 risky: udp 10.0.2.15:28681 -> 173.183.183.110:59920 -Flow 260 risky: udp 10.0.2.15:28681 -> 46.128.114.107:6578 -Flow 311 risky: udp 10.0.2.15:28681 -> 109.132.188.98:62851 Flow 308 risky: udp 10.0.2.15:28681 -> 81.205.91.45:40137 -Flow 251 risky: udp 10.0.2.15:28681 -> 185.203.218.92:56962 -Flow 259 risky: udp 10.0.2.15:28681 -> 103.232.107.100:43508 -Flow 250 risky: udp 10.0.2.15:28681 -> 51.68.153.214:26253 -Flow 256 risky: udp 10.0.2.15:28681 -> 96.246.156.126:50297 Flow 249 risky: udp 10.0.2.15:28681 -> 45.88.117.218:6909 -Flow 257 risky: udp 10.0.2.15:28681 -> 82.181.251.218:36368 -Flow 246 risky: udp 10.0.2.15:28681 -> 96.65.68.194:35481 -Flow 314 risky: udp 10.0.2.15:28681 -> 71.237.202.91:16117 Flow 317 risky: udp 10.0.2.15:28681 -> 96.236.205.7:34794 -Flow 261 risky: udp 10.0.2.15:28681 -> 60.241.48.194:21301 -Flow 313 risky: udp 10.0.2.15:28681 -> 176.99.176.20:6346 -Flow 255 risky: udp 10.0.2.15:28681 -> 80.61.221.246:30577 -Flow 248 risky: udp 10.0.2.15:28681 -> 66.30.221.181:12012 Flow 263 risky: udp 10.0.2.15:28681 -> 82.217.176.52:7446 -Flow 253 risky: udp 10.0.2.15:28681 -> 193.37.255.130:61616 -Flow 252 risky: udp 10.0.2.15:28681 -> 72.140.120.41:47739 -Flow 316 risky: udp 10.0.2.15:28681 -> 94.54.66.82:63637 +Flow 311 risky: udp 10.0.2.15:28681 -> 109.132.188.98:62851 +Flow 313 risky: udp 10.0.2.15:28681 -> 176.99.176.20:6346 Flow 262 risky: udp 10.0.2.15:28681 -> 89.75.52.19:46010 -Flow 264 risky: udp 10.0.2.15:28681 -> 95.10.205.67:11603 -Flow 312 risky: udp 10.0.2.15:28681 -> 24.167.201.53:47282 +Flow 310 risky: udp 10.0.2.15:28681 -> 118.240.69.199:6348 Flow 329 risky: udp 10.0.2.15:28681 -> 92.117.249.98:6815 Flow 328 risky: udp 10.0.2.15:28681 -> 203.220.105.27:19260 -Flow 331 risky: udp 10.0.2.15:28681 -> 45.31.152.112:26851 Flow 320 risky: udp 10.0.2.15:28681 -> 185.236.200.137:48142 -Flow 332 risky: udp 10.0.2.15:28681 -> 213.229.111.224:4876 Flow 325 risky: udp 10.0.2.15:28681 -> 83.160.143.48:37036 -Flow 323 risky: udp 10.0.2.15:28681 -> 96.246.156.126:56070 -Flow 322 risky: udp 10.0.2.15:28681 -> 45.88.117.219:6909 +Flow 330 risky: udp 10.0.2.15:28681 -> 82.64.44.11:1352 Flow 327 risky: udp 10.0.2.15:28681 -> 84.28.53.225:44859 -Flow 321 risky: udp 10.0.2.15:28681 -> 188.165.203.190:21995 Flow 324 risky: udp 10.0.2.15:28681 -> 73.250.179.237:20848 +Flow 323 risky: udp 10.0.2.15:28681 -> 96.246.156.126:56070 Flow 319 risky: udp 10.0.2.15:28681 -> 164.132.10.25:55302 -Flow 330 risky: udp 10.0.2.15:28681 -> 82.64.44.11:1352 Flow 326 risky: udp 10.0.2.15:28681 -> 100.1.231.138:56558 +Flow 322 risky: udp 10.0.2.15:28681 -> 45.88.117.219:6909 +Flow 332 risky: udp 10.0.2.15:28681 -> 213.229.111.224:4876 +Flow 321 risky: udp 10.0.2.15:28681 -> 188.165.203.190:21995 +Flow 331 risky: udp 10.0.2.15:28681 -> 45.31.152.112:26851 Flow 336 risky: udp 10.0.2.15:28681 -> 80.7.252.192:6888 Flow 349 risky: icmp 84.197.97.94 -> 10.0.2.15 Flow 338 risky: udp 10.0.2.15:28681 -> 221.198.205.196:20778 -Flow 340 risky: udp 10.0.2.15:28681 -> 38.142.119.234:49732 Flow 350 risky: udp 10.0.2.15:28681 -> 99.250.253.99:11819 -Flow 343 risky: udp 10.0.2.15:28681 -> 89.212.91.155:5195 -Flow 344 risky: udp 10.0.2.15:28681 -> 207.38.163.228:6778 -Flow 348 risky: udp 10.0.2.15:28681 -> 84.197.97.94:1360 -Flow 346 risky: udp 10.0.2.15:28681 -> 76.226.85.105:6346 -Flow 342 risky: udp 10.0.2.15:28681 -> 98.208.26.154:4994 Flow 337 risky: udp 10.0.2.15:28681 -> 24.116.64.132:51227 Flow 347 risky: udp 10.0.2.15:28681 -> 176.10.169.10:12799 +Flow 344 risky: udp 10.0.2.15:28681 -> 207.38.163.228:6778 +Flow 348 risky: udp 10.0.2.15:28681 -> 84.197.97.94:1360 Flow 339 risky: udp 10.0.2.15:28681 -> 87.123.54.234:54130 Flow 341 risky: udp 10.0.2.15:28681 -> 24.129.233.60:19990 -Flow 354 risky: udp 10.0.2.15:28681 -> 80.236.247.120:1032 -Flow 352 risky: udp 10.0.2.15:28681 -> 176.191.49.159:6346 +Flow 340 risky: udp 10.0.2.15:28681 -> 38.142.119.234:49732 +Flow 342 risky: udp 10.0.2.15:28681 -> 98.208.26.154:4994 +Flow 343 risky: udp 10.0.2.15:28681 -> 89.212.91.155:5195 +Flow 346 risky: udp 10.0.2.15:28681 -> 76.226.85.105:6346 Flow 353 risky: udp 10.0.2.15:28681 -> 195.181.151.217:25282 Flow 351 risky: udp 10.0.2.15:28681 -> 187.37.87.189:6346 +Flow 352 risky: udp 10.0.2.15:28681 -> 176.191.49.159:6346 +Flow 354 risky: udp 10.0.2.15:28681 -> 80.236.247.120:1032 Flow 94 risky: tcp 10.0.2.15:50249 -> 86.208.180.181:45883 -Flow 35 risky: tcp 10.0.2.15:50196 -> 218.250.6.59:12556 +Flow 42 not-detected: tcp 10.0.2.15:50202 -> 61.238.173.128:57648 Flow 46 risky: tcp 10.0.2.15:50206 -> 175.181.156.244:8255 -Flow 77 risky: tcp 10.0.2.15:50236 -> 93.29.135.209:6346 Flow 73 risky: tcp 10.0.2.15:50232 -> 182.155.242.225:15068 -Flow 67 risky: tcp 10.0.2.15:50226 -> 116.241.162.162:15677 +Flow 76 risky: tcp 10.0.2.15:50235 -> 45.88.118.70:6906 Flow 119 risky: tcp 10.0.2.15:50250 -> 27.94.154.53:6346 -Flow 42 not-detected: tcp 10.0.2.15:50202 -> 61.238.173.128:57648 -Flow 36 risky: tcp 10.0.2.15:50197 -> 118.168.15.71:3931 -Flow 121 risky: tcp 10.0.2.15:50252 -> 123.202.31.113:19768 -Flow 63 not-detected: tcp 10.0.2.15:50222 -> 119.14.143.237:6523 Flow 61 not-detected: tcp 10.0.2.15:50220 -> 36.233.196.226:3820 -Flow 43 risky: tcp 10.0.2.15:50203 -> 61.222.160.99:18994 -Flow 69 not-detected: tcp 10.0.2.15:50228 -> 111.241.31.96:14384 Flow 122 risky: tcp 10.0.2.15:50253 -> 103.232.107.100:43508 +Flow 121 risky: tcp 10.0.2.15:50252 -> 123.202.31.113:19768 Flow 38 risky: tcp 10.0.2.15:50199 -> 47.147.52.21:36728 Flow 51 risky: tcp 10.0.2.15:50211 -> 14.199.10.60:23458 -Flow 76 risky: tcp 10.0.2.15:50235 -> 45.88.118.70:6906 -Flow 358 risky: udp 10.0.2.15:28681 -> 47.224.174.174:6346 +Flow 63 not-detected: tcp 10.0.2.15:50222 -> 119.14.143.237:6523 +Flow 43 risky: tcp 10.0.2.15:50203 -> 61.222.160.99:18994 +Flow 69 not-detected: tcp 10.0.2.15:50228 -> 111.241.31.96:14384 +Flow 35 risky: tcp 10.0.2.15:50196 -> 218.250.6.59:12556 +Flow 67 risky: tcp 10.0.2.15:50226 -> 116.241.162.162:15677 +Flow 77 risky: tcp 10.0.2.15:50236 -> 93.29.135.209:6346 +Flow 36 risky: tcp 10.0.2.15:50197 -> 118.168.15.71:3931 Flow 357 risky: udp 10.0.2.15:28681 -> 98.35.85.238:32173 Flow 356 risky: udp 10.0.2.15:28681 -> 63.228.175.169:1936 Flow 355 risky: udp 10.0.2.15:28681 -> 181.118.53.212:29998 -Flow 293 risky: tcp 10.0.2.15:50317 -> 188.165.203.190:21995 -Flow 292 risky: tcp 10.0.2.15:50316 -> 142.132.165.13:30566 -Flow 289 risky: tcp 10.0.2.15:50313 -> 96.65.68.194:35481 -Flow 223 risky: tcp 10.0.2.15:50269 -> 218.103.139.2:3186 +Flow 358 risky: udp 10.0.2.15:28681 -> 47.224.174.174:6346 Flow 148 risky: tcp 10.0.2.15:50261 -> 156.57.42.2:33476 Flow 280 risky: tcp 10.0.2.15:50304 -> 85.168.34.105:39908 -Flow 143 not-detected: tcp 10.0.2.15:50256 -> 36.233.201.161:2886 Flow 285 risky: tcp 10.0.2.15:50309 -> 60.241.48.194:21301 -Flow 283 risky: tcp 10.0.2.15:50307 -> 176.99.176.20:6346 -Flow 149 risky: tcp 10.0.2.15:50262 -> 80.61.221.246:30577 -Flow 295 risky: tcp 10.0.2.15:50319 -> 185.187.74.173:53489 -Flow 298 risky: tcp 10.0.2.15:50322 -> 164.132.10.25:55302 +Flow 272 risky: tcp 10.0.2.15:50296 -> 77.58.211.52:3806 +Flow 289 risky: tcp 10.0.2.15:50313 -> 96.65.68.194:35481 Flow 237 not-detected: tcp 10.0.2.15:50283 -> 51.68.153.214:35004 -Flow 269 risky: tcp 10.0.2.15:50293 -> 97.83.183.148:8890 Flow 296 risky: tcp 10.0.2.15:50320 -> 194.163.180.126:10825 -Flow 284 risky: tcp 10.0.2.15:50308 -> 193.37.255.130:61616 +Flow 271 risky: tcp 10.0.2.15:50295 -> 38.142.119.234:49732 Flow 153 not-detected: tcp 10.0.2.15:50266 -> 219.70.175.103:4315 -Flow 37 risky: tcp 10.0.2.15:50198 -> 86.129.196.84:9915 -Flow 287 risky: tcp 10.0.2.15:50311 -> 149.28.163.175:49956 -Flow 291 risky: tcp 10.0.2.15:50315 -> 45.31.152.112:26851 Flow 279 risky: tcp 10.0.2.15:50303 -> 88.120.73.215:24562 -Flow 271 risky: tcp 10.0.2.15:50295 -> 38.142.119.234:49732 -Flow 221 risky: tcp 10.0.2.15:50267 -> 113.252.86.162:9239 Flow 270 risky: tcp 10.0.2.15:50294 -> 14.200.255.229:37058 -Flow 272 risky: tcp 10.0.2.15:50296 -> 77.58.211.52:3806 +Flow 146 risky: tcp 10.0.2.15:50259 -> 183.179.90.112:9852 +Flow 298 risky: tcp 10.0.2.15:50322 -> 164.132.10.25:55302 +Flow 287 risky: tcp 10.0.2.15:50311 -> 149.28.163.175:49956 Flow 275 risky: tcp 10.0.2.15:50299 -> 203.220.198.244:1194 +Flow 223 risky: tcp 10.0.2.15:50269 -> 218.103.139.2:3186 +Flow 143 not-detected: tcp 10.0.2.15:50256 -> 36.233.201.161:2886 +Flow 269 risky: tcp 10.0.2.15:50293 -> 97.83.183.148:8890 +Flow 273 risky: tcp 10.0.2.15:50297 -> 14.200.255.229:45710 +Flow 293 risky: tcp 10.0.2.15:50317 -> 188.165.203.190:21995 +Flow 292 risky: tcp 10.0.2.15:50316 -> 142.132.165.13:30566 +Flow 283 risky: tcp 10.0.2.15:50307 -> 176.99.176.20:6346 +Flow 291 risky: tcp 10.0.2.15:50315 -> 45.31.152.112:26851 Flow 294 risky: tcp 10.0.2.15:50318 -> 193.32.126.214:59596 +Flow 295 risky: tcp 10.0.2.15:50319 -> 185.187.74.173:53489 +Flow 284 risky: tcp 10.0.2.15:50308 -> 193.37.255.130:61616 Flow 274 risky: tcp 10.0.2.15:50298 -> 46.128.114.107:6578 -Flow 146 risky: tcp 10.0.2.15:50259 -> 183.179.90.112:9852 -Flow 222 risky: tcp 10.0.2.15:50268 -> 210.209.249.84:24751 -Flow 273 risky: tcp 10.0.2.15:50297 -> 14.200.255.229:45710 +Flow 221 risky: tcp 10.0.2.15:50267 -> 113.252.86.162:9239 +Flow 37 risky: tcp 10.0.2.15:50198 -> 86.129.196.84:9915 Flow 299 risky: tcp 10.0.2.15:50323 -> 51.68.153.214:26253 +Flow 222 risky: tcp 10.0.2.15:50268 -> 210.209.249.84:24751 +Flow 149 risky: tcp 10.0.2.15:50262 -> 80.61.221.246:30577 Flow 361 risky: udp 10.0.2.15:28681 -> 86.129.196.84:9915 Flow 362 risky: udp 10.0.2.15:28681 -> 190.192.210.182:6754 Flow 360 risky: udp 10.0.2.15:28681 -> 198.58.218.12:47912 Flow 277 risky: tcp 10.0.2.15:50301 -> 87.123.54.234:54130 -Flow 282 risky: tcp 10.0.2.15:50306 -> 220.238.145.82:33527 Flow 278 risky: tcp 10.0.2.15:50302 -> 75.64.6.175:4743 -Flow 366 risky: udp 10.0.2.15:28681 -> 94.8.55.158:51140 -Flow 365 risky: udp 10.0.2.15:28681 -> 188.23.24.213:18561 +Flow 282 risky: tcp 10.0.2.15:50306 -> 220.238.145.82:33527 Flow 368 risky: udp 10.0.2.15:28681 -> 47.147.52.21:36728 -Flow 363 risky: udp 10.0.2.15:28681 -> 81.205.91.45:38297 Flow 364 risky: udp 10.0.2.15:28681 -> 194.163.180.126:10825 +Flow 366 risky: udp 10.0.2.15:28681 -> 94.8.55.158:51140 Flow 367 risky: udp 10.0.2.15:28681 -> 149.28.163.175:49956 +Flow 365 risky: udp 10.0.2.15:28681 -> 188.23.24.213:18561 +Flow 363 risky: udp 10.0.2.15:28681 -> 81.205.91.45:38297 Flow 267 risky: tcp 10.0.2.15:50291 -> 200.7.155.210:28365 Flow 345 risky: tcp 10.0.2.15:50330 -> 69.118.162.229:46906 Flow 220 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:9239 +Flow 29 not-detected: tcp 10.0.2.15:50191 -> 207.38.163.228:6778 Flow 31 not-detected: tcp 10.0.2.15:50193 -> 89.75.52.19:46010 Flow 28 not-detected: tcp 10.0.2.15:50190 -> 80.140.63.147:29545 Flow 30 not-detected: tcp 10.0.2.15:50192 -> 45.65.87.24:16201 -Flow 29 not-detected: tcp 10.0.2.15:50191 -> 207.38.163.228:6778 +Flow 373 risky: udp 10.0.2.15:28681 -> 88.122.233.15:11488 Flow 371 risky: udp 10.0.2.15:28681 -> 109.131.202.24:44748 +Flow 372 risky: udp 10.0.2.15:28681 -> 91.179.185.126:6346 Flow 370 risky: udp 10.0.2.15:28681 -> 91.172.56.198:11984 Flow 374 risky: udp 10.0.2.15:28681 -> 62.35.190.5:18604 -Flow 372 risky: udp 10.0.2.15:28681 -> 91.179.185.126:6346 -Flow 373 risky: udp 10.0.2.15:28681 -> 88.122.233.15:11488 -Flow 433 risky: udp 10.0.2.15:28681 -> 99.255.145.191:47264 -Flow 404 risky: udp 10.0.2.15:28681 -> 86.234.216.251:17845 -Flow 426 risky: udp 10.0.2.15:28681 -> 219.71.44.121:14398 -Flow 411 risky: udp 10.0.2.15:28681 -> 89.143.28.64:6346 -Flow 408 risky: udp 10.0.2.15:28681 -> 90.103.2.245:6346 -Flow 424 risky: udp 10.0.2.15:28681 -> 93.15.216.216:6346 -Flow 422 risky: udp 10.0.2.15:28681 -> 88.123.35.219:42211 -Flow 439 risky: udp 10.0.2.15:28681 -> 176.135.15.86:6346 Flow 481 risky: udp 10.0.2.15:28681 -> 82.120.219.74:6346 -Flow 435 risky: udp 10.0.2.15:28681 -> 109.24.146.101:6346 -Flow 465 risky: udp 10.0.2.15:28681 -> 2.28.39.18:15672 -Flow 421 risky: udp 10.0.2.15:28681 -> 175.182.39.11:12977 -Flow 416 risky: udp 10.0.2.15:28681 -> 92.139.61.103:24096 -Flow 413 risky: udp 10.0.2.15:28681 -> 87.65.188.29:24676 -Flow 412 risky: udp 10.0.2.15:28681 -> 58.177.52.73:6346 Flow 418 risky: udp 10.0.2.15:28681 -> 75.129.149.103:6346 -Flow 468 risky: udp 10.0.2.15:28681 -> 94.214.12.247:44001 -Flow 466 risky: udp 10.0.2.15:28681 -> 70.119.248.5:49929 -Flow 428 risky: udp 10.0.2.15:28681 -> 86.162.97.8:6346 -Flow 425 risky: udp 10.0.2.15:28681 -> 145.82.53.165:6346 -Flow 401 risky: udp 10.0.2.15:28681 -> 173.178.192.76:6346 -Flow 484 risky: udp 10.0.2.15:28681 -> 107.4.56.177:10000 -Flow 406 risky: udp 10.0.2.15:28681 -> 109.27.3.68:57380 Flow 467 risky: udp 10.0.2.15:28681 -> 61.64.177.53:23458 -Flow 431 risky: udp 10.0.2.15:28681 -> 88.124.71.246:49035 -Flow 402 risky: udp 10.0.2.15:28681 -> 78.219.202.2:6346 -Flow 420 risky: udp 10.0.2.15:28681 -> 86.227.127.34:6346 -Flow 417 risky: udp 10.0.2.15:28681 -> 94.187.236.179:6346 Flow 485 risky: udp 10.0.2.15:28681 -> 154.3.42.209:6346 +Flow 423 risky: udp 10.0.2.15:28681 -> 119.247.6.226:9713 +Flow 432 risky: udp 10.0.2.15:28681 -> 104.6.118.53:6346 +Flow 422 risky: udp 10.0.2.15:28681 -> 88.123.35.219:42211 +Flow 439 risky: udp 10.0.2.15:28681 -> 176.135.15.86:6346 +Flow 413 risky: udp 10.0.2.15:28681 -> 87.65.188.29:24676 +Flow 430 risky: udp 10.0.2.15:28681 -> 90.8.95.165:40763 +Flow 411 risky: udp 10.0.2.15:28681 -> 89.143.28.64:6346 +Flow 424 risky: udp 10.0.2.15:28681 -> 93.15.216.216:6346 +Flow 484 risky: udp 10.0.2.15:28681 -> 107.4.56.177:10000 +Flow 404 risky: udp 10.0.2.15:28681 -> 86.234.216.251:17845 +Flow 435 risky: udp 10.0.2.15:28681 -> 109.24.146.101:6346 Flow 427 risky: udp 10.0.2.15:28681 -> 81.249.13.30:15138 Flow 405 risky: udp 10.0.2.15:28681 -> 176.155.31.118:6346 -Flow 415 risky: udp 10.0.2.15:28681 -> 90.247.160.96:17817 -Flow 486 risky: udp 10.0.2.15:28681 -> 88.68.45.203:6346 Flow 410 risky: udp 10.0.2.15:28681 -> 93.28.130.131:6346 -Flow 423 risky: udp 10.0.2.15:28681 -> 119.247.6.226:9713 -Flow 438 risky: udp 10.0.2.15:28681 -> 71.86.190.163:14142 -Flow 403 risky: udp 10.0.2.15:28681 -> 197.244.171.132:6346 -Flow 429 risky: udp 10.0.2.15:28681 -> 165.169.215.213:23576 -Flow 436 risky: udp 10.0.2.15:28681 -> 219.68.179.137:6406 -Flow 414 risky: udp 10.0.2.15:28681 -> 175.181.156.244:8255 +Flow 440 risky: udp 10.0.2.15:28681 -> 203.165.170.112:37087 +Flow 433 risky: udp 10.0.2.15:28681 -> 99.255.145.191:47264 +Flow 466 risky: udp 10.0.2.15:28681 -> 70.119.248.5:49929 +Flow 428 risky: udp 10.0.2.15:28681 -> 86.162.97.8:6346 +Flow 431 risky: udp 10.0.2.15:28681 -> 88.124.71.246:49035 +Flow 415 risky: udp 10.0.2.15:28681 -> 90.247.160.96:17817 +Flow 437 risky: udp 10.0.2.15:28681 -> 31.38.163.2:6346 Flow 409 risky: udp 10.0.2.15:28681 -> 86.194.53.68:33770 -Flow 482 risky: udp 10.0.2.15:28681 -> 86.193.23.172:42227 Flow 400 risky: udp 10.0.2.15:28681 -> 129.45.47.167:6346 +Flow 412 risky: udp 10.0.2.15:28681 -> 58.177.52.73:6346 +Flow 401 risky: udp 10.0.2.15:28681 -> 173.178.192.76:6346 Flow 407 risky: udp 10.0.2.15:28681 -> 195.181.151.217:6346 -Flow 440 risky: udp 10.0.2.15:28681 -> 203.165.170.112:37087 -Flow 437 risky: udp 10.0.2.15:28681 -> 31.38.163.2:6346 -Flow 419 risky: udp 10.0.2.15:28681 -> 78.193.236.8:46557 -Flow 432 risky: udp 10.0.2.15:28681 -> 104.6.118.53:6346 +Flow 417 risky: udp 10.0.2.15:28681 -> 94.187.236.179:6346 +Flow 414 risky: udp 10.0.2.15:28681 -> 175.181.156.244:8255 +Flow 465 risky: udp 10.0.2.15:28681 -> 2.28.39.18:15672 +Flow 486 risky: udp 10.0.2.15:28681 -> 88.68.45.203:6346 +Flow 436 risky: udp 10.0.2.15:28681 -> 219.68.179.137:6406 +Flow 482 risky: udp 10.0.2.15:28681 -> 86.193.23.172:42227 +Flow 421 risky: udp 10.0.2.15:28681 -> 175.182.39.11:12977 +Flow 416 risky: udp 10.0.2.15:28681 -> 92.139.61.103:24096 +Flow 425 risky: udp 10.0.2.15:28681 -> 145.82.53.165:6346 Flow 434 risky: udp 10.0.2.15:28681 -> 114.24.182.130:22232 -Flow 430 risky: udp 10.0.2.15:28681 -> 90.8.95.165:40763 -Flow 488 risky: udp 10.0.2.15:28681 -> 183.179.90.112:9852 -Flow 490 risky: udp 10.0.2.15:28681 -> 90.3.215.132:20356 +Flow 402 risky: udp 10.0.2.15:28681 -> 78.219.202.2:6346 +Flow 419 risky: udp 10.0.2.15:28681 -> 78.193.236.8:46557 +Flow 406 risky: udp 10.0.2.15:28681 -> 109.27.3.68:57380 +Flow 420 risky: udp 10.0.2.15:28681 -> 86.227.127.34:6346 +Flow 426 risky: udp 10.0.2.15:28681 -> 219.71.44.121:14398 +Flow 408 risky: udp 10.0.2.15:28681 -> 90.103.2.245:6346 +Flow 468 risky: udp 10.0.2.15:28681 -> 94.214.12.247:44001 +Flow 429 risky: udp 10.0.2.15:28681 -> 165.169.215.213:23576 +Flow 438 risky: udp 10.0.2.15:28681 -> 71.86.190.163:14142 +Flow 403 risky: udp 10.0.2.15:28681 -> 197.244.171.132:6346 Flow 489 risky: udp 10.0.2.15:28681 -> 108.44.45.25:6346 -Flow 487 risky: udp 10.0.2.15:28681 -> 24.78.134.188:49046 -Flow 491 risky: udp 10.0.2.15:28681 -> 36.233.42.210:5512 +Flow 490 risky: udp 10.0.2.15:28681 -> 90.3.215.132:20356 +Flow 488 risky: udp 10.0.2.15:28681 -> 183.179.90.112:9852 Flow 492 risky: udp 10.0.2.15:28681 -> 172.94.41.71:6346 +Flow 491 risky: udp 10.0.2.15:28681 -> 36.233.42.210:5512 +Flow 487 risky: udp 10.0.2.15:28681 -> 24.78.134.188:49046 Flow 90 not-detected: tcp 10.0.2.15:50245 -> 73.62.225.181:46843 Flow 300 not-detected: udp 10.0.2.15:28681 -> 104.238.172.250:23548 Flow 745 risky: icmp 164.132.10.25 -> 10.0.2.15 -Flow 509 risky: udp 10.0.2.15:28681 -> 92.142.109.190:41370 -Flow 511 risky: udp 10.0.2.15:28681 -> 68.47.223.27:6346 -Flow 496 risky: udp 10.0.2.15:28681 -> 218.173.230.98:19004 Flow 495 risky: udp 10.0.2.15:28681 -> 81.247.89.20:6346 -Flow 516 risky: udp 10.0.2.15:28681 -> 119.246.147.72:4572 -Flow 501 risky: udp 10.0.2.15:28681 -> 88.160.214.137:6346 -Flow 506 risky: udp 10.0.2.15:28681 -> 136.32.84.139:6346 -Flow 508 risky: udp 10.0.2.15:28681 -> 92.144.99.73:10745 -Flow 513 risky: udp 10.0.2.15:28681 -> 78.196.216.12:58910 -Flow 499 risky: udp 10.0.2.15:28681 -> 1.161.80.82:8656 -Flow 503 risky: udp 10.0.2.15:28681 -> 74.210.244.72:6346 Flow 505 risky: udp 10.0.2.15:28681 -> 42.2.62.28:6387 -Flow 494 risky: udp 10.0.2.15:28681 -> 86.210.81.59:6346 +Flow 507 risky: udp 10.0.2.15:28681 -> 50.4.204.220:6346 Flow 498 risky: udp 10.0.2.15:28681 -> 8.44.149.207:30551 -Flow 504 risky: udp 10.0.2.15:28681 -> 85.203.45.107:6346 +Flow 513 risky: udp 10.0.2.15:28681 -> 78.196.216.12:58910 +Flow 509 risky: udp 10.0.2.15:28681 -> 92.142.109.190:41370 Flow 502 risky: udp 10.0.2.15:28681 -> 47.156.58.211:6346 -Flow 507 risky: udp 10.0.2.15:28681 -> 50.4.204.220:6346 -Flow 512 risky: udp 10.0.2.15:28681 -> 209.204.207.5:49256 Flow 518 risky: udp 10.0.2.15:28681 -> 202.151.63.59:7624 -Flow 500 risky: udp 10.0.2.15:28681 -> 220.143.34.225:20071 +Flow 515 risky: udp 10.0.2.15:28681 -> 220.137.106.173:11625 +Flow 501 risky: udp 10.0.2.15:28681 -> 88.160.214.137:6346 +Flow 506 risky: udp 10.0.2.15:28681 -> 136.32.84.139:6346 +Flow 508 risky: udp 10.0.2.15:28681 -> 92.144.99.73:10745 +Flow 499 risky: udp 10.0.2.15:28681 -> 1.161.80.82:8656 +Flow 511 risky: udp 10.0.2.15:28681 -> 68.47.223.27:6346 Flow 514 risky: udp 10.0.2.15:28681 -> 83.114.40.175:23552 -Flow 517 risky: udp 10.0.2.15:28681 -> 36.239.162.27:7986 +Flow 500 risky: udp 10.0.2.15:28681 -> 220.143.34.225:20071 +Flow 504 risky: udp 10.0.2.15:28681 -> 85.203.45.107:6346 Flow 519 risky: udp 10.0.2.15:28681 -> 219.70.48.23:8070 +Flow 503 risky: udp 10.0.2.15:28681 -> 74.210.244.72:6346 +Flow 494 risky: udp 10.0.2.15:28681 -> 86.210.81.59:6346 Flow 510 risky: udp 10.0.2.15:28681 -> 79.94.85.113:6346 +Flow 496 risky: udp 10.0.2.15:28681 -> 218.173.230.98:19004 Flow 497 risky: udp 10.0.2.15:28681 -> 84.100.76.123:39628 -Flow 515 risky: udp 10.0.2.15:28681 -> 220.137.106.173:11625 +Flow 516 risky: udp 10.0.2.15:28681 -> 119.246.147.72:4572 +Flow 512 risky: udp 10.0.2.15:28681 -> 209.204.207.5:49256 +Flow 517 risky: udp 10.0.2.15:28681 -> 36.239.162.27:7986 Flow 301 not-detected: udp 10.0.2.15:28681 -> 188.61.52.183:11852 Flow 243 not-detected: udp 10.0.2.15:28681 -> 104.156.226.72:53258 Flow 242 not-detected: udp 10.0.2.15:28681 -> 75.133.101.93:52367 +Flow 748 risky: udp 10.0.2.15:28681 -> 92.8.59.80:35192 Flow 750 risky: udp 10.0.2.15:28681 -> 67.193.8.52:38584 +Flow 749 risky: udp 10.0.2.15:28681 -> 78.159.27.22:17563 Flow 752 risky: udp 10.0.2.15:28681 -> 78.231.73.14:6346 -Flow 748 risky: udp 10.0.2.15:28681 -> 92.8.59.80:35192 Flow 751 risky: udp 10.0.2.15:28681 -> 142.115.218.152:5900 -Flow 749 risky: udp 10.0.2.15:28681 -> 78.159.27.22:17563 Flow 753 risky: udp 10.0.2.15:28681 -> 165.84.140.96:14400 Flow 369 not-detected: udp 10.0.2.15:28681 -> 89.187.171.240:6346 -Flow 755 risky: udp 10.0.2.15:28681 -> 83.134.107.32:38836 Flow 756 risky: udp 10.0.2.15:28681 -> 41.100.68.255:12838 -Flow 398 not-detected: udp 10.0.2.15:28681 -> 62.102.148.166:31332 -Flow 392 not-detected: udp 10.0.2.15:28681 -> 42.0.69.215:12608 -Flow 304 not-detected: udp 10.0.2.15:28681 -> 193.32.126.214:59596 -Flow 389 not-detected: udp 10.0.2.15:28681 -> 94.215.183.71:31310 +Flow 755 risky: udp 10.0.2.15:28681 -> 83.134.107.32:38836 Flow 385 not-detected: udp 10.0.2.15:28681 -> 66.223.143.31:47978 Flow 399 not-detected: udp 10.0.2.15:28681 -> 175.39.219.223:31728 -Flow 303 not-detected: udp 10.0.2.15:28681 -> 142.132.165.13:30566 +Flow 392 not-detected: udp 10.0.2.15:28681 -> 42.0.69.215:12608 Flow 395 not-detected: udp 10.0.2.15:28681 -> 191.114.88.39:18751 -Flow 387 not-detected: udp 10.0.2.15:28681 -> 220.135.8.7:1219 Flow 390 not-detected: udp 10.0.2.15:28681 -> 144.134.132.206:16401 -Flow 391 not-detected: udp 10.0.2.15:28681 -> 161.81.38.67:9539 +Flow 389 not-detected: udp 10.0.2.15:28681 -> 94.215.183.71:31310 +Flow 398 not-detected: udp 10.0.2.15:28681 -> 62.102.148.166:31332 Flow 397 not-detected: udp 10.0.2.15:28681 -> 80.7.252.192:24634 Flow 396 not-detected: udp 10.0.2.15:28681 -> 112.119.59.24:28755 +Flow 391 not-detected: udp 10.0.2.15:28681 -> 161.81.38.67:9539 +Flow 303 not-detected: udp 10.0.2.15:28681 -> 142.132.165.13:30566 +Flow 304 not-detected: udp 10.0.2.15:28681 -> 193.32.126.214:59596 +Flow 387 not-detected: udp 10.0.2.15:28681 -> 220.135.8.7:1219 Flow 483 not-detected: udp 10.0.2.2:1026 -> 10.0.2.15:28681 Flow 759 risky: udp 10.0.2.15:28681 -> 104.238.172.250:23548 Flow 757 risky: udp 10.0.2.15:28681 -> 104.156.226.72:53258 -Flow 577 not-detected: udp 10.0.2.15:28681 -> 59.148.100.237:23459 -Flow 586 not-detected: udp 10.0.2.15:28681 -> 221.124.66.33:13060 -Flow 618 not-detected: udp 10.0.2.15:28681 -> 1.172.184.48:13281 -Flow 377 not-detected: udp 10.0.2.15:28681 -> 180.200.236.13:12082 -Flow 526 not-detected: udp 10.0.2.15:28681 -> 36.234.197.93:1483 -Flow 669 not-detected: udp 10.0.2.15:28681 -> 218.164.200.235:2846 -Flow 609 not-detected: udp 10.0.2.15:28681 -> 116.241.162.162:59016 -Flow 690 not-detected: udp 10.0.2.15:28681 -> 61.18.212.223:50637 -Flow 441 not-detected: udp 10.0.2.15:28681 -> 36.237.199.108:56040 -Flow 700 not-detected: udp 10.0.2.15:28681 -> 91.206.27.26:6578 -Flow 450 not-detected: udp 10.0.2.15:28681 -> 113.252.206.254:23458 -Flow 592 not-detected: udp 10.0.2.15:28681 -> 1.36.249.91:7190 -Flow 701 not-detected: udp 10.0.2.15:28681 -> 119.237.190.184:64163 +Flow 449 not-detected: udp 10.0.2.15:28681 -> 61.238.173.128:8826 +Flow 636 not-detected: udp 10.0.2.15:28681 -> 80.193.171.146:53143 +Flow 685 not-detected: udp 10.0.2.15:28681 -> 111.241.31.96:8349 +Flow 661 not-detected: udp 10.0.2.15:28681 -> 24.127.1.235:37814 +Flow 650 not-detected: udp 10.0.2.15:28681 -> 114.47.227.91:58856 +Flow 576 not-detected: udp 10.0.2.15:28681 -> 104.238.172.250:42925 +Flow 575 not-detected: udp 10.0.2.15:28681 -> 123.202.31.113:19768 Flow 479 not-detected: udp 10.0.2.15:28681 -> 123.205.13.148:51896 +Flow 444 not-detected: udp 10.0.2.15:28681 -> 122.117.100.78:9010 +Flow 676 not-detected: udp 10.0.2.15:28681 -> 1.64.208.110:55550 +Flow 697 not-detected: udp 10.0.2.15:28681 -> 14.199.10.60:53906 +Flow 604 not-detected: udp 10.0.2.15:28681 -> 123.202.31.113:53291 +Flow 378 not-detected: udp 10.0.2.15:28681 -> 118.241.204.61:43366 +Flow 698 not-detected: udp 10.0.2.15:28681 -> 70.81.219.111:19210 +Flow 644 not-detected: udp 10.0.2.15:28681 -> 173.22.22.94:34245 +Flow 602 not-detected: udp 10.0.2.15:28681 -> 123.203.72.224:53658 +Flow 610 not-detected: udp 10.0.2.15:28681 -> 61.10.174.159:4841 +Flow 671 not-detected: udp 10.0.2.15:28681 -> 180.218.135.222:49867 +Flow 709 not-detected: udp 10.0.2.15:28681 -> 223.16.121.156:3624 +Flow 569 not-detected: udp 10.0.2.15:28681 -> 73.89.249.8:50649 Flow 603 not-detected: udp 10.0.2.15:28681 -> 1.36.249.91:64577 +Flow 447 not-detected: udp 10.0.2.15:28681 -> 14.199.10.60:23458 +Flow 375 not-detected: udp 10.0.2.15:28681 -> 73.182.136.42:27873 +Flow 672 not-detected: udp 10.0.2.15:28681 -> 223.16.83.5:4765 +Flow 640 not-detected: udp 10.0.2.15:28681 -> 1.36.249.91:65430 +Flow 682 not-detected: udp 10.0.2.15:28681 -> 203.220.198.244:50896 +Flow 654 not-detected: udp 10.0.2.15:28681 -> 84.118.116.198:44616 +Flow 653 not-detected: udp 10.0.2.15:28681 -> 82.12.1.136:6348 +Flow 712 not-detected: udp 10.0.2.15:28681 -> 185.187.74.173:59978 Flow 394 not-detected: udp 10.0.2.15:28681 -> 165.84.134.136:21407 -Flow 740 not-detected: udp 10.0.2.15:28681 -> 36.237.25.47:21293 -Flow 646 not-detected: udp 10.0.2.15:28681 -> 36.237.10.152:21293 Flow 621 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:3227 -Flow 733 not-detected: udp 10.0.2.15:28681 -> 99.199.148.6:4338 -Flow 597 not-detected: udp 10.0.2.15:28681 -> 36.236.203.37:52274 -Flow 675 not-detected: udp 10.0.2.15:28681 -> 123.205.118.77:62191 Flow 738 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:3256 -Flow 628 not-detected: udp 10.0.2.15:28681 -> 45.65.87.24:16201 -Flow 616 not-detected: udp 10.0.2.15:28681 -> 220.208.167.152:30628 -Flow 596 not-detected: udp 10.0.2.15:28681 -> 61.18.212.223:58954 -Flow 474 not-detected: udp 10.0.2.15:28681 -> 80.61.221.246:45880 +Flow 572 not-detected: udp 10.0.2.15:28681 -> 86.153.21.93:36696 +Flow 520 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:3339 +Flow 619 not-detected: udp 10.0.2.15:28681 -> 1.163.14.246:1630 +Flow 568 not-detected: udp 10.0.2.15:28681 -> 123.205.118.77:56562 +Flow 600 not-detected: udp 10.0.2.15:28681 -> 1.64.156.63:60092 +Flow 645 not-detected: udp 10.0.2.15:28681 -> 59.104.173.5:49803 +Flow 626 not-detected: udp 10.0.2.15:28681 -> 59.104.173.5:49815 +Flow 456 not-detected: udp 10.0.2.15:28681 -> 89.241.112.255:14766 +Flow 681 not-detected: udp 10.0.2.15:28681 -> 61.220.41.241:53072 +Flow 706 not-detected: udp 10.0.2.15:28681 -> 218.164.200.235:1968 +Flow 741 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:4364 +Flow 715 not-detected: udp 10.0.2.15:28681 -> 219.71.72.88:58808 +Flow 457 not-detected: udp 10.0.2.15:28681 -> 119.247.240.113:13867 +Flow 564 not-detected: udp 10.0.2.15:28681 -> 61.222.160.99:53144 +Flow 658 not-detected: udp 10.0.2.15:28681 -> 119.14.143.237:8075 +Flow 657 not-detected: udp 10.0.2.15:28681 -> 61.222.160.99:53195 +Flow 448 not-detected: udp 10.0.2.15:28681 -> 116.241.162.162:15677 +Flow 605 not-detected: udp 10.0.2.15:28681 -> 180.149.125.139:6578 +Flow 586 not-detected: udp 10.0.2.15:28681 -> 221.124.66.33:13060 +Flow 669 not-detected: udp 10.0.2.15:28681 -> 218.164.200.235:2846 Flow 713 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:51379 -Flow 593 not-detected: udp 10.0.2.15:28681 -> 124.218.26.16:9747 -Flow 571 not-detected: udp 10.0.2.15:28681 -> 114.40.163.123:55341 +Flow 471 not-detected: udp 10.0.2.15:28681 -> 80.7.252.192:43457 +Flow 707 not-detected: udp 10.0.2.15:28681 -> 183.179.14.31:64871 +Flow 598 not-detected: udp 10.0.2.15:28681 -> 1.172.184.48:1512 +Flow 446 not-detected: udp 10.0.2.15:28681 -> 61.70.199.107:60475 +Flow 623 not-detected: udp 10.0.2.15:28681 -> 210.209.249.84:24751 +Flow 727 not-detected: udp 10.0.2.15:28681 -> 101.136.187.253:10914 +Flow 742 not-detected: udp 10.0.2.15:28681 -> 194.163.180.126:36780 +Flow 469 not-detected: udp 10.0.2.15:28681 -> 87.123.54.234:47184 +Flow 665 not-detected: udp 10.0.2.15:28681 -> 82.36.106.134:3927 +Flow 677 not-detected: udp 10.0.2.15:28681 -> 223.16.83.5:9128 +Flow 445 not-detected: udp 10.0.2.15:28681 -> 118.165.153.100:4509 +Flow 475 not-detected: udp 10.0.2.15:28681 -> 188.61.52.183:63978 +Flow 630 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:3931 +Flow 565 not-detected: udp 10.0.2.15:28681 -> 114.45.40.28:2656 +Flow 597 not-detected: udp 10.0.2.15:28681 -> 36.236.203.37:52274 +Flow 614 not-detected: udp 10.0.2.15:28681 -> 123.205.118.77:60482 +Flow 670 not-detected: udp 10.0.2.15:28681 -> 36.236.203.37:52669 +Flow 582 not-detected: udp 10.0.2.15:28681 -> 223.16.83.5:10624 +Flow 376 not-detected: udp 10.0.2.15:28681 -> 156.57.42.2:33476 +Flow 662 not-detected: udp 10.0.2.15:28681 -> 96.59.117.166:33192 +Flow 678 not-detected: udp 10.0.2.15:28681 -> 150.116.225.105:51438 +Flow 651 not-detected: udp 10.0.2.15:28681 -> 1.64.156.63:65023 +Flow 625 not-detected: udp 10.0.2.15:28681 -> 113.252.206.254:49737 +Flow 522 not-detected: udp 10.0.2.15:28681 -> 119.247.152.218:51153 +Flow 664 not-detected: udp 10.0.2.15:28681 -> 1.172.183.237:4983 +Flow 708 not-detected: udp 10.0.2.15:28681 -> 124.244.68.65:51967 +Flow 442 not-detected: udp 10.0.2.15:28681 -> 89.204.130.55:29545 +Flow 592 not-detected: udp 10.0.2.15:28681 -> 1.36.249.91:7190 +Flow 740 not-detected: udp 10.0.2.15:28681 -> 36.237.25.47:21293 +Flow 646 not-detected: udp 10.0.2.15:28681 -> 36.237.10.152:21293 +Flow 675 not-detected: udp 10.0.2.15:28681 -> 123.205.118.77:62191 Flow 524 not-detected: udp 10.0.2.15:28681 -> 80.193.171.146:65362 Flow 642 not-detected: udp 10.0.2.15:28681 -> 220.39.142.122:6346 -Flow 477 not-detected: udp 10.0.2.15:28681 -> 94.54.66.82:45640 -Flow 444 not-detected: udp 10.0.2.15:28681 -> 122.117.100.78:9010 -Flow 572 not-detected: udp 10.0.2.15:28681 -> 86.153.21.93:36696 -Flow 478 not-detected: udp 10.0.2.15:28681 -> 36.235.85.44:64914 -Flow 449 not-detected: udp 10.0.2.15:28681 -> 61.238.173.128:8826 +Flow 744 not-detected: udp 10.0.2.15:28681 -> 164.132.10.25:48250 +Flow 720 not-detected: udp 10.0.2.15:28681 -> 76.26.178.132:10053 +Flow 606 not-detected: udp 10.0.2.15:28681 -> 149.28.163.175:42288 +Flow 613 not-detected: udp 10.0.2.15:28681 -> 119.247.152.218:51920 +Flow 704 not-detected: udp 10.0.2.15:28681 -> 123.192.83.59:33513 +Flow 711 not-detected: udp 10.0.2.15:28681 -> 220.129.86.65:49723 +Flow 732 not-detected: udp 10.0.2.15:28681 -> 85.168.34.105:39908 +Flow 686 not-detected: udp 10.0.2.15:28681 -> 119.14.143.237:13965 +Flow 702 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10728 +Flow 659 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10791 +Flow 699 not-detected: udp 10.0.2.15:28681 -> 77.222.213.44:26536 +Flow 580 not-detected: udp 10.0.2.15:28681 -> 76.119.55.28:20347 +Flow 590 not-detected: udp 10.0.2.15:28681 -> 95.10.205.67:48380 +Flow 441 not-detected: udp 10.0.2.15:28681 -> 36.237.199.108:56040 +Flow 616 not-detected: udp 10.0.2.15:28681 -> 220.208.167.152:30628 +Flow 381 not-detected: udp 10.0.2.15:28681 -> 77.58.211.52:3806 +Flow 386 not-detected: udp 10.0.2.15:28681 -> 85.172.10.90:40162 +Flow 666 not-detected: udp 10.0.2.15:28681 -> 159.196.95.223:2003 +Flow 725 not-detected: udp 10.0.2.15:28681 -> 219.91.30.216:61635 +Flow 585 not-detected: udp 10.0.2.15:28681 -> 51.68.153.214:35004 +Flow 589 not-detected: udp 10.0.2.15:28681 -> 113.255.250.32:52647 +Flow 525 not-detected: udp 10.0.2.15:28681 -> 113.255.250.32:52660 +Flow 452 not-detected: udp 10.0.2.15:28681 -> 68.227.193.37:27481 +Flow 624 not-detected: udp 10.0.2.15:28681 -> 61.238.173.128:57492 +Flow 730 not-detected: udp 10.0.2.15:28681 -> 124.217.188.105:62849 +Flow 652 not-detected: udp 10.0.2.15:28681 -> 94.139.21.182:50110 +Flow 382 not-detected: udp 10.0.2.15:28681 -> 76.175.11.126:40958 +Flow 689 not-detected: udp 10.0.2.15:28681 -> 1.65.217.224:3688 Flow 649 not-detected: udp 10.0.2.15:28681 -> 122.117.100.78:56128 -Flow 461 not-detected: udp 10.0.2.15:28681 -> 69.27.193.124:50555 -Flow 520 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:3339 -Flow 335 not-detected: udp 10.0.2.15:28681 -> 14.200.255.229:37058 Flow 635 not-detected: udp 10.0.2.15:28681 -> 219.70.48.23:2556 -Flow 636 not-detected: udp 10.0.2.15:28681 -> 80.193.171.146:53143 -Flow 637 not-detected: udp 10.0.2.15:28681 -> 36.233.194.73:1995 -Flow 676 not-detected: udp 10.0.2.15:28681 -> 1.64.208.110:55550 Flow 722 not-detected: udp 10.0.2.15:28681 -> 213.32.245.121:12333 -Flow 578 not-detected: udp 10.0.2.15:28681 -> 77.205.243.44:46006 Flow 737 not-detected: udp 10.0.2.15:28681 -> 174.115.127.251:23897 -Flow 584 not-detected: udp 10.0.2.15:28681 -> 80.193.171.146:18360 -Flow 472 not-detected: udp 10.0.2.15:28681 -> 94.54.66.82:45744 -Flow 471 not-detected: udp 10.0.2.15:28681 -> 80.7.252.192:43457 -Flow 744 not-detected: udp 10.0.2.15:28681 -> 164.132.10.25:48250 -Flow 707 not-detected: udp 10.0.2.15:28681 -> 183.179.14.31:64871 -Flow 476 not-detected: udp 10.0.2.15:28681 -> 98.18.172.208:63172 -Flow 381 not-detected: udp 10.0.2.15:28681 -> 77.58.211.52:3806 Flow 683 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:54459 -Flow 386 not-detected: udp 10.0.2.15:28681 -> 85.172.10.90:40162 -Flow 619 not-detected: udp 10.0.2.15:28681 -> 1.163.14.246:1630 Flow 691 not-detected: udp 10.0.2.15:28681 -> 61.93.150.146:62507 -Flow 620 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:53516 +Flow 688 not-detected: udp 10.0.2.15:28681 -> 114.36.234.196:11629 +Flow 384 not-detected: udp 10.0.2.15:28681 -> 75.64.6.175:4743 +Flow 656 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:54914 +Flow 694 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:6514 +Flow 660 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:6527 +Flow 731 not-detected: udp 10.0.2.15:28681 -> 50.58.238.163:6564 +Flow 747 not-detected: udp 10.0.2.15:28681 -> 50.58.238.163:6599 +Flow 458 not-detected: udp 10.0.2.15:28681 -> 118.165.228.167:12201 +Flow 583 not-detected: udp 10.0.2.15:28681 -> 87.75.180.80:35361 +Flow 638 not-detected: udp 10.0.2.15:28681 -> 182.155.242.225:15068 +Flow 728 not-detected: udp 10.0.2.15:28681 -> 112.10.134.44:19739 +Flow 588 not-detected: udp 10.0.2.15:28681 -> 219.70.175.103:4315 +Flow 609 not-detected: udp 10.0.2.15:28681 -> 116.241.162.162:59016 +Flow 690 not-detected: udp 10.0.2.15:28681 -> 61.18.212.223:50637 +Flow 450 not-detected: udp 10.0.2.15:28681 -> 113.252.206.254:23458 +Flow 733 not-detected: udp 10.0.2.15:28681 -> 99.199.148.6:4338 +Flow 335 not-detected: udp 10.0.2.15:28681 -> 14.200.255.229:37058 Flow 667 not-detected: udp 10.0.2.15:28681 -> 223.18.211.177:18085 -Flow 720 not-detected: udp 10.0.2.15:28681 -> 76.26.178.132:10053 -Flow 443 not-detected: udp 10.0.2.15:28681 -> 183.179.14.31:54754 -Flow 697 not-detected: udp 10.0.2.15:28681 -> 14.199.10.60:53906 Flow 622 not-detected: udp 10.0.2.15:28681 -> 36.234.18.166:61319 -Flow 714 not-detected: udp 10.0.2.15:28681 -> 76.174.174.69:21358 -Flow 614 not-detected: udp 10.0.2.15:28681 -> 123.205.118.77:60482 -Flow 746 not-detected: udp 10.0.2.15:28681 -> 123.205.126.102:5193 -Flow 606 not-detected: udp 10.0.2.15:28681 -> 149.28.163.175:42288 -Flow 739 not-detected: udp 10.0.2.15:28681 -> 104.156.226.72:19814 Flow 587 not-detected: udp 10.0.2.15:28681 -> 94.134.154.158:54130 -Flow 550 not-detected: udp 10.0.2.15:28681 -> 220.238.145.82:33527 -Flow 688 not-detected: udp 10.0.2.15:28681 -> 114.36.234.196:11629 -Flow 670 not-detected: udp 10.0.2.15:28681 -> 36.236.203.37:52669 -Flow 598 not-detected: udp 10.0.2.15:28681 -> 1.172.184.48:1512 -Flow 685 not-detected: udp 10.0.2.15:28681 -> 111.241.31.96:8349 -Flow 721 not-detected: udp 10.0.2.15:28681 -> 123.203.72.224:9897 Flow 631 not-detected: udp 10.0.2.15:28681 -> 36.231.59.187:62234 -Flow 591 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:53707 -Flow 594 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:7375 -Flow 613 not-detected: udp 10.0.2.15:28681 -> 119.247.152.218:51920 -Flow 617 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:7380 -Flow 582 not-detected: udp 10.0.2.15:28681 -> 223.16.83.5:10624 -Flow 568 not-detected: udp 10.0.2.15:28681 -> 123.205.118.77:56562 -Flow 446 not-detected: udp 10.0.2.15:28681 -> 61.70.199.107:60475 -Flow 470 not-detected: udp 10.0.2.15:28681 -> 185.187.74.173:46790 -Flow 623 not-detected: udp 10.0.2.15:28681 -> 210.209.249.84:24751 -Flow 629 not-detected: udp 10.0.2.15:28681 -> 14.200.255.229:45710 -Flow 692 not-detected: udp 10.0.2.15:28681 -> 76.110.153.177:40022 -Flow 604 not-detected: udp 10.0.2.15:28681 -> 123.202.31.113:53291 -Flow 718 not-detected: udp 10.0.2.15:28681 -> 218.102.208.175:9167 -Flow 447 not-detected: udp 10.0.2.15:28681 -> 14.199.10.60:23458 -Flow 451 not-detected: udp 10.0.2.15:28681 -> 218.35.66.21:22234 -Flow 600 not-detected: udp 10.0.2.15:28681 -> 1.64.156.63:60092 -Flow 645 not-detected: udp 10.0.2.15:28681 -> 59.104.173.5:49803 -Flow 661 not-detected: udp 10.0.2.15:28681 -> 24.127.1.235:37814 -Flow 626 not-detected: udp 10.0.2.15:28681 -> 59.104.173.5:49815 -Flow 384 not-detected: udp 10.0.2.15:28681 -> 75.64.6.175:4743 -Flow 378 not-detected: udp 10.0.2.15:28681 -> 118.241.204.61:43366 -Flow 703 not-detected: udp 10.0.2.15:28681 -> 114.40.67.191:14971 -Flow 656 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:54914 -Flow 727 not-detected: udp 10.0.2.15:28681 -> 101.136.187.253:10914 -Flow 456 not-detected: udp 10.0.2.15:28681 -> 89.241.112.255:14766 Flow 521 not-detected: udp 10.0.2.15:28681 -> 113.255.250.32:23458 -Flow 375 not-detected: udp 10.0.2.15:28681 -> 73.182.136.42:27873 Flow 455 not-detected: udp 10.0.2.15:28681 -> 58.153.206.183:16919 -Flow 453 not-detected: udp 10.0.2.15:28681 -> 74.127.26.138:3083 -Flow 704 not-detected: udp 10.0.2.15:28681 -> 123.192.83.59:33513 -Flow 641 not-detected: udp 10.0.2.15:28681 -> 36.233.199.103:2625 -Flow 460 not-detected: udp 10.0.2.15:28681 -> 210.194.116.78:8342 -Flow 717 not-detected: udp 10.0.2.15:28681 -> 79.191.58.38:48157 -Flow 742 not-detected: udp 10.0.2.15:28681 -> 194.163.180.126:36780 -Flow 454 not-detected: udp 10.0.2.15:28681 -> 223.16.121.156:23183 -Flow 674 not-detected: udp 10.0.2.15:28681 -> 219.70.1.236:9369 -Flow 672 not-detected: udp 10.0.2.15:28681 -> 223.16.83.5:4765 -Flow 681 not-detected: udp 10.0.2.15:28681 -> 61.220.41.241:53072 -Flow 640 not-detected: udp 10.0.2.15:28681 -> 1.36.249.91:65430 -Flow 682 not-detected: udp 10.0.2.15:28681 -> 203.220.198.244:50896 Flow 679 not-detected: udp 10.0.2.15:28681 -> 113.252.83.132:57131 -Flow 694 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:6514 -Flow 469 not-detected: udp 10.0.2.15:28681 -> 87.123.54.234:47184 -Flow 665 not-detected: udp 10.0.2.15:28681 -> 82.36.106.134:3927 -Flow 660 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:6527 -Flow 615 not-detected: udp 10.0.2.15:28681 -> 74.195.236.249:18557 Flow 716 not-detected: udp 10.0.2.15:28681 -> 98.249.190.8:25198 -Flow 731 not-detected: udp 10.0.2.15:28681 -> 50.58.238.163:6564 -Flow 388 not-detected: udp 10.0.2.15:28681 -> 121.7.145.36:33905 -Flow 735 not-detected: udp 10.0.2.15:28681 -> 45.31.152.112:52420 -Flow 747 not-detected: udp 10.0.2.15:28681 -> 50.58.238.163:6599 -Flow 634 not-detected: udp 10.0.2.15:28681 -> 24.179.18.242:47329 Flow 527 not-detected: udp 10.0.2.15:28681 -> 42.72.149.140:37848 -Flow 643 not-detected: udp 10.0.2.15:28681 -> 31.20.248.147:30706 -Flow 711 not-detected: udp 10.0.2.15:28681 -> 220.129.86.65:49723 -Flow 563 not-detected: udp 10.0.2.15:28681 -> 112.105.52.2:6831 -Flow 639 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:7849 -Flow 729 not-detected: udp 10.0.2.15:28681 -> 114.47.227.91:54463 -Flow 732 not-detected: udp 10.0.2.15:28681 -> 85.168.34.105:39908 -Flow 633 not-detected: udp 10.0.2.15:28681 -> 68.174.18.115:50679 -Flow 607 not-detected: udp 10.0.2.15:28681 -> 111.241.31.96:4814 -Flow 705 not-detected: udp 10.0.2.15:28681 -> 124.218.26.16:8658 -Flow 698 not-detected: udp 10.0.2.15:28681 -> 70.81.219.111:19210 -Flow 595 not-detected: udp 10.0.2.15:28681 -> 175.182.21.156:13732 Flow 723 not-detected: udp 10.0.2.15:28681 -> 175.39.219.223:13482 -Flow 376 not-detected: udp 10.0.2.15:28681 -> 156.57.42.2:33476 -Flow 673 not-detected: udp 10.0.2.15:28681 -> 125.59.215.249:14571 +Flow 736 not-detected: udp 10.0.2.15:28681 -> 118.166.252.163:14391 +Flow 618 not-detected: udp 10.0.2.15:28681 -> 1.172.184.48:13281 +Flow 461 not-detected: udp 10.0.2.15:28681 -> 69.27.193.124:50555 +Flow 746 not-detected: udp 10.0.2.15:28681 -> 123.205.126.102:5193 +Flow 703 not-detected: udp 10.0.2.15:28681 -> 114.40.67.191:14971 +Flow 460 not-detected: udp 10.0.2.15:28681 -> 210.194.116.78:8342 Flow 611 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:59384 Flow 724 not-detected: udp 10.0.2.15:28681 -> 1.65.217.224:9070 -Flow 666 not-detected: udp 10.0.2.15:28681 -> 159.196.95.223:2003 -Flow 644 not-detected: udp 10.0.2.15:28681 -> 173.22.22.94:34245 +Flow 668 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:64731 +Flow 599 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:59875 +Flow 632 not-detected: udp 10.0.2.15:28681 -> 188.149.2.44:20964 +Flow 700 not-detected: udp 10.0.2.15:28681 -> 91.206.27.26:6578 +Flow 701 not-detected: udp 10.0.2.15:28681 -> 119.237.190.184:64163 +Flow 477 not-detected: udp 10.0.2.15:28681 -> 94.54.66.82:45640 +Flow 478 not-detected: udp 10.0.2.15:28681 -> 36.235.85.44:64914 +Flow 472 not-detected: udp 10.0.2.15:28681 -> 94.54.66.82:45744 +Flow 739 not-detected: udp 10.0.2.15:28681 -> 104.156.226.72:19814 +Flow 454 not-detected: udp 10.0.2.15:28681 -> 223.16.121.156:23183 +Flow 674 not-detected: udp 10.0.2.15:28681 -> 219.70.1.236:9369 +Flow 735 not-detected: udp 10.0.2.15:28681 -> 45.31.152.112:52420 +Flow 634 not-detected: udp 10.0.2.15:28681 -> 24.179.18.242:47329 +Flow 595 not-detected: udp 10.0.2.15:28681 -> 175.182.21.156:13732 Flow 648 not-detected: udp 10.0.2.15:28681 -> 180.218.135.222:4548 Flow 579 not-detected: udp 10.0.2.15:28681 -> 223.16.170.108:23458 -Flow 677 not-detected: udp 10.0.2.15:28681 -> 223.16.83.5:9128 -Flow 706 not-detected: udp 10.0.2.15:28681 -> 218.164.200.235:1968 -Flow 654 not-detected: udp 10.0.2.15:28681 -> 84.118.116.198:44616 -Flow 725 not-detected: udp 10.0.2.15:28681 -> 219.91.30.216:61635 -Flow 302 not-detected: udp 10.0.2.15:28681 -> 185.187.74.173:53489 -Flow 668 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:64731 -Flow 741 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:4364 -Flow 696 not-detected: udp 10.0.2.15:28681 -> 188.165.203.190:55050 -Flow 585 not-detected: udp 10.0.2.15:28681 -> 51.68.153.214:35004 -Flow 686 not-detected: udp 10.0.2.15:28681 -> 119.14.143.237:13965 -Flow 662 not-detected: udp 10.0.2.15:28681 -> 96.59.117.166:33192 -Flow 602 not-detected: udp 10.0.2.15:28681 -> 123.203.72.224:53658 -Flow 589 not-detected: udp 10.0.2.15:28681 -> 113.255.250.32:52647 -Flow 653 not-detected: udp 10.0.2.15:28681 -> 82.12.1.136:6348 -Flow 458 not-detected: udp 10.0.2.15:28681 -> 118.165.228.167:12201 -Flow 525 not-detected: udp 10.0.2.15:28681 -> 113.255.250.32:52660 -Flow 610 not-detected: udp 10.0.2.15:28681 -> 61.10.174.159:4841 -Flow 734 not-detected: udp 10.0.2.15:28681 -> 113.252.91.201:4297 -Flow 627 not-detected: udp 10.0.2.15:28681 -> 73.62.225.181:46843 -Flow 380 not-detected: udp 10.0.2.15:28681 -> 83.86.49.195:12019 -Flow 702 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10728 -Flow 650 not-detected: udp 10.0.2.15:28681 -> 114.47.227.91:58856 -Flow 581 not-detected: udp 10.0.2.15:28681 -> 58.115.108.10:4641 -Flow 612 not-detected: udp 10.0.2.15:28681 -> 106.104.88.139:7423 -Flow 583 not-detected: udp 10.0.2.15:28681 -> 87.75.180.80:35361 -Flow 671 not-detected: udp 10.0.2.15:28681 -> 180.218.135.222:49867 Flow 574 not-detected: udp 10.0.2.15:28681 -> 223.17.132.18:23458 -Flow 678 not-detected: udp 10.0.2.15:28681 -> 150.116.225.105:51438 -Flow 715 not-detected: udp 10.0.2.15:28681 -> 219.71.72.88:58808 -Flow 659 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10791 -Flow 457 not-detected: udp 10.0.2.15:28681 -> 119.247.240.113:13867 -Flow 564 not-detected: udp 10.0.2.15:28681 -> 61.222.160.99:53144 +Flow 726 not-detected: udp 10.0.2.15:28681 -> 1.171.82.65:50072 +Flow 687 not-detected: udp 10.0.2.15:28681 -> 66.30.221.181:53454 +Flow 577 not-detected: udp 10.0.2.15:28681 -> 59.148.100.237:23459 +Flow 526 not-detected: udp 10.0.2.15:28681 -> 36.234.197.93:1483 +Flow 474 not-detected: udp 10.0.2.15:28681 -> 80.61.221.246:45880 +Flow 637 not-detected: udp 10.0.2.15:28681 -> 36.233.194.73:1995 +Flow 550 not-detected: udp 10.0.2.15:28681 -> 220.238.145.82:33527 +Flow 721 not-detected: udp 10.0.2.15:28681 -> 123.203.72.224:9897 +Flow 470 not-detected: udp 10.0.2.15:28681 -> 185.187.74.173:46790 +Flow 641 not-detected: udp 10.0.2.15:28681 -> 36.233.199.103:2625 +Flow 633 not-detected: udp 10.0.2.15:28681 -> 68.174.18.115:50679 +Flow 673 not-detected: udp 10.0.2.15:28681 -> 125.59.215.249:14571 +Flow 627 not-detected: udp 10.0.2.15:28681 -> 73.62.225.181:46843 Flow 647 not-detected: udp 10.0.2.15:28681 -> 61.18.212.223:58290 -Flow 699 not-detected: udp 10.0.2.15:28681 -> 77.222.213.44:26536 -Flow 651 not-detected: udp 10.0.2.15:28681 -> 1.64.156.63:65023 -Flow 658 not-detected: udp 10.0.2.15:28681 -> 119.14.143.237:8075 -Flow 712 not-detected: udp 10.0.2.15:28681 -> 185.187.74.173:59978 -Flow 657 not-detected: udp 10.0.2.15:28681 -> 61.222.160.99:53195 -Flow 576 not-detected: udp 10.0.2.15:28681 -> 104.238.172.250:42925 Flow 570 not-detected: udp 10.0.2.15:28681 -> 97.83.183.148:8890 -Flow 680 not-detected: udp 10.0.2.15:28681 -> 61.227.198.100:6910 -Flow 566 not-detected: udp 10.0.2.15:28681 -> 58.176.62.40:52755 -Flow 599 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:59875 -Flow 601 not-detected: udp 10.0.2.15:28681 -> 113.255.200.161:65274 -Flow 638 not-detected: udp 10.0.2.15:28681 -> 182.155.242.225:15068 Flow 463 not-detected: udp 10.0.2.15:28681 -> 200.7.155.210:28365 -Flow 726 not-detected: udp 10.0.2.15:28681 -> 1.171.82.65:50072 -Flow 452 not-detected: udp 10.0.2.15:28681 -> 68.227.193.37:27481 -Flow 608 not-detected: udp 10.0.2.15:28681 -> 1.163.14.246:23461 -Flow 736 not-detected: udp 10.0.2.15:28681 -> 118.166.252.163:14391 -Flow 448 not-detected: udp 10.0.2.15:28681 -> 116.241.162.162:15677 -Flow 549 not-detected: udp 10.0.2.15:28681 -> 84.211.151.48:11105 -Flow 459 not-detected: udp 10.0.2.15:28681 -> 100.89.84.59:11603 -Flow 625 not-detected: udp 10.0.2.15:28681 -> 113.252.206.254:49737 -Flow 580 not-detected: udp 10.0.2.15:28681 -> 76.119.55.28:20347 -Flow 624 not-detected: udp 10.0.2.15:28681 -> 61.238.173.128:57492 -Flow 567 not-detected: udp 10.0.2.15:28681 -> 58.176.62.40:52889 -Flow 684 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:54436 Flow 743 not-detected: udp 10.0.2.15:28681 -> 27.94.154.53:6346 -Flow 730 not-detected: udp 10.0.2.15:28681 -> 124.217.188.105:62849 Flow 710 not-detected: udp 10.0.2.15:28681 -> 113.254.140.225:63637 -Flow 709 not-detected: udp 10.0.2.15:28681 -> 223.16.121.156:3624 -Flow 687 not-detected: udp 10.0.2.15:28681 -> 66.30.221.181:53454 -Flow 445 not-detected: udp 10.0.2.15:28681 -> 118.165.153.100:4509 -Flow 652 not-detected: udp 10.0.2.15:28681 -> 94.139.21.182:50110 -Flow 569 not-detected: udp 10.0.2.15:28681 -> 73.89.249.8:50649 -Flow 393 not-detected: udp 10.0.2.15:28681 -> 58.115.158.103:5110 -Flow 464 not-detected: udp 10.0.2.15:28681 -> 101.128.66.8:34512 -Flow 522 not-detected: udp 10.0.2.15:28681 -> 119.247.152.218:51153 Flow 480 not-detected: udp 10.0.2.15:28681 -> 112.119.74.26:65498 -Flow 382 not-detected: udp 10.0.2.15:28681 -> 76.175.11.126:40958 -Flow 590 not-detected: udp 10.0.2.15:28681 -> 95.10.205.67:48380 -Flow 605 not-detected: udp 10.0.2.15:28681 -> 180.149.125.139:6578 -Flow 689 not-detected: udp 10.0.2.15:28681 -> 1.65.217.224:3688 -Flow 664 not-detected: udp 10.0.2.15:28681 -> 1.172.183.237:4983 -Flow 708 not-detected: udp 10.0.2.15:28681 -> 124.244.68.65:51967 Flow 655 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:2566 -Flow 728 not-detected: udp 10.0.2.15:28681 -> 112.10.134.44:19739 Flow 548 not-detected: udp 10.0.2.15:28681 -> 74.50.147.205:17735 -Flow 632 not-detected: udp 10.0.2.15:28681 -> 188.149.2.44:20964 -Flow 475 not-detected: udp 10.0.2.15:28681 -> 188.61.52.183:63978 -Flow 473 not-detected: udp 10.0.2.15:28681 -> 142.132.165.13:33564 -Flow 575 not-detected: udp 10.0.2.15:28681 -> 123.202.31.113:19768 -Flow 588 not-detected: udp 10.0.2.15:28681 -> 219.70.175.103:4315 +Flow 377 not-detected: udp 10.0.2.15:28681 -> 180.200.236.13:12082 +Flow 596 not-detected: udp 10.0.2.15:28681 -> 61.18.212.223:58954 +Flow 620 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:53516 +Flow 591 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:53707 +Flow 629 not-detected: udp 10.0.2.15:28681 -> 14.200.255.229:45710 +Flow 451 not-detected: udp 10.0.2.15:28681 -> 218.35.66.21:22234 +Flow 717 not-detected: udp 10.0.2.15:28681 -> 79.191.58.38:48157 +Flow 705 not-detected: udp 10.0.2.15:28681 -> 124.218.26.16:8658 +Flow 696 not-detected: udp 10.0.2.15:28681 -> 188.165.203.190:55050 +Flow 680 not-detected: udp 10.0.2.15:28681 -> 61.227.198.100:6910 +Flow 566 not-detected: udp 10.0.2.15:28681 -> 58.176.62.40:52755 +Flow 601 not-detected: udp 10.0.2.15:28681 -> 113.255.200.161:65274 +Flow 608 not-detected: udp 10.0.2.15:28681 -> 1.163.14.246:23461 +Flow 549 not-detected: udp 10.0.2.15:28681 -> 84.211.151.48:11105 +Flow 567 not-detected: udp 10.0.2.15:28681 -> 58.176.62.40:52889 Flow 379 not-detected: udp 10.0.2.15:28681 -> 80.140.63.147:29545 Flow 719 not-detected: udp 10.0.2.15:28681 -> 219.85.11.85:10722 -Flow 442 not-detected: udp 10.0.2.15:28681 -> 89.204.130.55:29545 -Flow 630 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:3931 -Flow 565 not-detected: udp 10.0.2.15:28681 -> 114.45.40.28:2656 Flow 523 not-detected: udp 10.0.2.15:28681 -> 1.162.138.200:24018 +Flow 628 not-detected: udp 10.0.2.15:28681 -> 45.65.87.24:16201 +Flow 593 not-detected: udp 10.0.2.15:28681 -> 124.218.26.16:9747 +Flow 571 not-detected: udp 10.0.2.15:28681 -> 114.40.163.123:55341 +Flow 578 not-detected: udp 10.0.2.15:28681 -> 77.205.243.44:46006 +Flow 714 not-detected: udp 10.0.2.15:28681 -> 76.174.174.69:21358 +Flow 563 not-detected: udp 10.0.2.15:28681 -> 112.105.52.2:6831 +Flow 729 not-detected: udp 10.0.2.15:28681 -> 114.47.227.91:54463 +Flow 607 not-detected: udp 10.0.2.15:28681 -> 111.241.31.96:4814 +Flow 380 not-detected: udp 10.0.2.15:28681 -> 83.86.49.195:12019 +Flow 581 not-detected: udp 10.0.2.15:28681 -> 58.115.108.10:4641 +Flow 612 not-detected: udp 10.0.2.15:28681 -> 106.104.88.139:7423 +Flow 459 not-detected: udp 10.0.2.15:28681 -> 100.89.84.59:11603 +Flow 393 not-detected: udp 10.0.2.15:28681 -> 58.115.158.103:5110 +Flow 464 not-detected: udp 10.0.2.15:28681 -> 101.128.66.8:34512 +Flow 473 not-detected: udp 10.0.2.15:28681 -> 142.132.165.13:33564 Flow 693 not-detected: udp 10.0.2.15:28681 -> 98.215.130.156:12405 +Flow 584 not-detected: udp 10.0.2.15:28681 -> 80.193.171.146:18360 +Flow 476 not-detected: udp 10.0.2.15:28681 -> 98.18.172.208:63172 +Flow 443 not-detected: udp 10.0.2.15:28681 -> 183.179.14.31:54754 +Flow 594 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:7375 +Flow 617 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:7380 +Flow 692 not-detected: udp 10.0.2.15:28681 -> 76.110.153.177:40022 +Flow 718 not-detected: udp 10.0.2.15:28681 -> 218.102.208.175:9167 +Flow 453 not-detected: udp 10.0.2.15:28681 -> 74.127.26.138:3083 +Flow 615 not-detected: udp 10.0.2.15:28681 -> 74.195.236.249:18557 +Flow 388 not-detected: udp 10.0.2.15:28681 -> 121.7.145.36:33905 +Flow 643 not-detected: udp 10.0.2.15:28681 -> 31.20.248.147:30706 +Flow 639 not-detected: udp 10.0.2.15:28681 -> 119.237.116.22:7849 +Flow 302 not-detected: udp 10.0.2.15:28681 -> 185.187.74.173:53489 +Flow 734 not-detected: udp 10.0.2.15:28681 -> 113.252.91.201:4297 +Flow 684 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:54436 Flow 760 risky: udp 10.0.2.15:138 -> 10.0.2.255:138 Flow 764 risky: udp 10.0.2.15:28681 -> 208.92.106.151:32476 -Flow 762 risky: udp 10.0.2.15:28681 -> 86.75.43.182:43502 Flow 763 risky: udp 10.0.2.15:28681 -> 85.170.209.214:46210 Flow 761 risky: udp 10.0.2.15:28681 -> 195.132.75.56:56009 -Flow 544 not-detected: udp 10.0.2.15:28681 -> 111.184.29.35:30582 -Flow 533 not-detected: udp 10.0.2.15:28681 -> 36.229.185.60:6898 +Flow 762 risky: udp 10.0.2.15:28681 -> 86.75.43.182:43502 +Flow 538 not-detected: udp 10.0.2.15:28681 -> 124.218.41.253:14339 +Flow 554 not-detected: udp 10.0.2.15:28681 -> 123.203.72.224:55577 Flow 553 not-detected: udp 10.0.2.15:28681 -> 182.155.128.228:3259 -Flow 546 not-detected: udp 10.0.2.15:28681 -> 38.142.119.234:49867 -Flow 531 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:51497 -Flow 534 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:54436 -Flow 562 not-detected: udp 10.0.2.15:28681 -> 112.119.242.110:59879 -Flow 542 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:51675 -Flow 551 not-detected: udp 10.0.2.15:28681 -> 92.24.129.230:14766 Flow 555 not-detected: udp 10.0.2.15:28681 -> 124.218.26.16:20387 -Flow 538 not-detected: udp 10.0.2.15:28681 -> 124.218.41.253:14339 -Flow 536 not-detected: udp 10.0.2.15:28681 -> 118.167.222.160:56121 -Flow 558 not-detected: udp 10.0.2.15:28681 -> 112.105.52.2:6466 Flow 556 not-detected: udp 10.0.2.15:28681 -> 59.104.173.5:49787 -Flow 560 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:53883 -Flow 559 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:55080 -Flow 529 not-detected: udp 10.0.2.15:28681 -> 116.241.162.162:57929 Flow 539 not-detected: udp 10.0.2.15:28681 -> 119.14.143.237:7510 -Flow 545 not-detected: udp 10.0.2.15:28681 -> 116.49.159.77:55915 -Flow 663 not-detected: udp 10.0.2.15:28681 -> 50.58.238.163:6594 -Flow 554 not-detected: udp 10.0.2.15:28681 -> 123.203.72.224:55577 -Flow 528 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:58442 Flow 537 not-detected: udp 10.0.2.15:28681 -> 218.164.200.235:2034 +Flow 557 not-detected: udp 10.0.2.15:28681 -> 61.222.160.99:53163 +Flow 544 not-detected: udp 10.0.2.15:28681 -> 111.184.29.35:30582 +Flow 531 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:51497 +Flow 542 not-detected: udp 10.0.2.15:28681 -> 218.103.139.2:51675 +Flow 540 not-detected: udp 10.0.2.15:28681 -> 36.236.203.37:52131 Flow 535 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10655 Flow 532 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:10677 +Flow 541 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:11141 +Flow 561 not-detected: udp 10.0.2.15:28681 -> 61.238.173.128:57466 +Flow 546 not-detected: udp 10.0.2.15:28681 -> 38.142.119.234:49867 +Flow 534 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:54436 +Flow 551 not-detected: udp 10.0.2.15:28681 -> 92.24.129.230:14766 +Flow 559 not-detected: udp 10.0.2.15:28681 -> 113.252.86.162:55080 +Flow 529 not-detected: udp 10.0.2.15:28681 -> 116.241.162.162:57929 +Flow 663 not-detected: udp 10.0.2.15:28681 -> 50.58.238.163:6594 Flow 695 not-detected: udp 10.0.2.15:28681 -> 76.189.72.230:8161 +Flow 562 not-detected: udp 10.0.2.15:28681 -> 112.119.242.110:59879 Flow 552 not-detected: udp 10.0.2.15:28681 -> 218.250.6.59:60012 +Flow 560 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:53883 +Flow 533 not-detected: udp 10.0.2.15:28681 -> 36.229.185.60:6898 +Flow 536 not-detected: udp 10.0.2.15:28681 -> 118.167.222.160:56121 +Flow 558 not-detected: udp 10.0.2.15:28681 -> 112.105.52.2:6466 Flow 543 not-detected: udp 10.0.2.15:28681 -> 114.39.159.60:56896 -Flow 557 not-detected: udp 10.0.2.15:28681 -> 61.222.160.99:53163 -Flow 561 not-detected: udp 10.0.2.15:28681 -> 61.238.173.128:57466 -Flow 541 not-detected: udp 10.0.2.15:28681 -> 114.27.24.95:11141 +Flow 545 not-detected: udp 10.0.2.15:28681 -> 116.49.159.77:55915 +Flow 528 not-detected: udp 10.0.2.15:28681 -> 118.168.15.71:58442 Flow 547 not-detected: udp 10.0.2.15:28681 -> 213.229.111.224:43316 Flow 530 not-detected: udp 10.0.2.15:28681 -> 118.167.248.220:59304 -Flow 540 not-detected: udp 10.0.2.15:28681 -> 36.236.203.37:52131 Flow 783 risky: icmp 65.182.231.232 -> 10.0.2.15 Flow 754 not-detected: udp 10.0.2.15:28681 -> 84.125.218.84:17561 Flow 573 not-detected: udp 10.0.2.15:28681 -> 71.239.173.18:23327 Flow 383 not-detected: udp 10.0.2.15:28681 -> 84.71.243.60:34498 -Flow 787 risky: udp 10.0.2.15:28681 -> 220.133.122.217:23458 -Flow 793 risky: udp 10.0.2.15:28681 -> 123.205.126.102:5193 -Flow 792 risky: udp 10.0.2.15:28681 -> 36.239.213.146:21750 -Flow 786 risky: udp 10.0.2.15:28681 -> 114.38.9.82:24223 Flow 788 risky: udp 10.0.2.15:28681 -> 220.134.167.82:5820 +Flow 785 risky: udp 10.0.2.15:28681 -> 176.134.139.39:6346 Flow 789 risky: udp 10.0.2.15:28681 -> 42.98.115.128:23458 +Flow 792 risky: udp 10.0.2.15:28681 -> 36.239.213.146:21750 +Flow 787 risky: udp 10.0.2.15:28681 -> 220.133.122.217:23458 +Flow 793 risky: udp 10.0.2.15:28681 -> 123.205.126.102:5193 Flow 790 risky: udp 10.0.2.15:28681 -> 218.164.39.233:20855 -Flow 785 risky: udp 10.0.2.15:28681 -> 176.134.139.39:6346 Flow 791 risky: udp 10.0.2.15:28681 -> 219.85.11.85:10722 +Flow 786 risky: udp 10.0.2.15:28681 -> 114.38.9.82:24223 Flow 797 risky: icmp 154.3.42.209 -> 10.0.2.15 -Flow 52 not-detected: tcp 10.0.2.15:50212 -> 95.17.124.40:6776 -Flow 777 not-detected: udp 10.0.2.15:28681 -> 124.244.211.43:23459 -Flow 245 not-detected: tcp 10.0.2.15:50289 -> 74.195.236.249:18557 -Flow 776 not-detected: udp 10.0.2.15:28681 -> 219.85.10.83:8797 -Flow 227 not-detected: tcp 10.0.2.15:50273 -> 24.179.18.242:47329 -Flow 767 not-detected: udp 10.0.2.15:28681 -> 45.65.87.24:16201 -Flow 72 not-detected: tcp 10.0.2.15:50231 -> 76.68.138.207:45079 -Flow 228 not-detected: tcp 10.0.2.15:50274 -> 68.174.18.115:50679 -Flow 778 not-detected: udp 10.0.2.15:28681 -> 122.117.100.78:9010 -Flow 773 not-detected: udp 10.0.2.15:28681 -> 86.153.21.93:36696 -Flow 779 not-detected: udp 10.0.2.15:28681 -> 1.65.217.224:18381 -Flow 768 not-detected: udp 10.0.2.15:28681 -> 14.200.255.229:37058 -Flow 765 not-detected: udp 10.0.2.15:28681 -> 213.229.111.224:4876 -Flow 75 not-detected: tcp 10.0.2.15:50234 -> 66.189.28.17:16269 -Flow 240 not-detected: tcp 10.0.2.15:50286 -> 84.118.116.198:44616 -Flow 74 not-detected: tcp 10.0.2.15:50233 -> 1.163.14.246:12854 -Flow 152 not-detected: tcp 10.0.2.15:50265 -> 113.255.250.32:52647 -Flow 796 risky: udp 10.0.2.15:28681 -> 41.249.63.200:22582 -Flow 233 not-detected: tcp 10.0.2.15:50279 -> 113.252.91.201:4297 -Flow 123 not-detected: tcp 10.0.2.15:50254 -> 24.78.134.188:49046 -Flow 333 risky: tcp 10.0.2.15:50327 -> 69.118.162.229:46906 -Flow 64 not-detected: tcp 10.0.2.15:50223 -> 118.167.248.220:63108 -Flow 59 not-detected: tcp 10.0.2.15:50218 -> 90.103.247.94:59045 Flow 49 not-detected: tcp 10.0.2.15:50209 -> 113.252.206.254:49587 -Flow 65 not-detected: tcp 10.0.2.15:50224 -> 78.125.63.97:6346 Flow 68 not-detected: tcp 10.0.2.15:50227 -> 111.246.157.94:51175 -Flow 56 not-detected: tcp 10.0.2.15:50215 -> 124.244.64.237:4704 +Flow 81 not-detected: tcp 10.0.2.15:50240 -> 36.237.10.152:21293 +Flow 79 not-detected: tcp 10.0.2.15:50238 -> 124.218.41.253:59144 +Flow 32 not-detected: tcp 10.0.2.15:50194 -> 92.152.66.153:43771 +Flow 231 not-detected: tcp 10.0.2.15:50277 -> 82.181.251.218:36368 +Flow 778 not-detected: udp 10.0.2.15:28681 -> 122.117.100.78:9010 Flow 71 not-detected: tcp 10.0.2.15:50230 -> 73.3.103.37:17296 Flow 244 not-detected: tcp 10.0.2.15:50288 -> 76.119.55.28:20347 -Flow 47 not-detected: tcp 10.0.2.15:50207 -> 90.78.171.204:6346 -Flow 281 not-detected: tcp 10.0.2.15:50305 -> 94.54.66.82:63637 -Flow 48 not-detected: tcp 10.0.2.15:50208 -> 119.237.116.22:8683 -Flow 266 not-detected: tcp 10.0.2.15:50290 -> 73.89.249.8:50649 -Flow 78 not-detected: tcp 10.0.2.15:50237 -> 88.123.202.175:37910 Flow 151 not-detected: tcp 10.0.2.15:50264 -> 95.10.205.67:48380 -Flow 89 not-detected: tcp 10.0.2.15:50244 -> 188.61.52.183:63978 -Flow 92 not-detected: tcp 10.0.2.15:50247 -> 66.30.221.181:51560 -Flow 784 not-detected: udp 10.0.2.15:28681 -> 23.19.141.110:6346 -Flow 774 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:6599 -Flow 268 not-detected: tcp 10.0.2.15:50292 -> 95.10.205.67:11603 -Flow 84 not-detected: tcp 10.0.2.15:50243 -> 176.138.129.252:27962 -Flow 142 not-detected: tcp 10.0.2.15:50255 -> 36.236.203.37:52165 -Flow 241 not-detected: tcp 10.0.2.15:50287 -> 98.215.130.156:12405 -Flow 236 not-detected: tcp 10.0.2.15:50282 -> 221.124.66.33:13060 -Flow 226 not-detected: tcp 10.0.2.15:50272 -> 1.172.184.48:13298 -Flow 225 not-detected: tcp 10.0.2.15:50271 -> 218.164.198.27:60202 Flow 224 not-detected: tcp 10.0.2.15:50270 -> 114.27.24.95:11427 -Flow 145 not-detected: tcp 10.0.2.15:50258 -> 122.100.216.210:7097 Flow 147 not-detected: tcp 10.0.2.15:50260 -> 113.255.200.161:51394 -Flow 81 not-detected: tcp 10.0.2.15:50240 -> 36.237.10.152:21293 -Flow 57 not-detected: tcp 10.0.2.15:50216 -> 182.155.128.228:3256 -Flow 44 not-detected: tcp 10.0.2.15:50204 -> 124.218.26.16:9728 -Flow 771 not-detected: udp 10.0.2.15:28681 -> 202.27.193.6:6346 -Flow 234 not-detected: tcp 10.0.2.15:50280 -> 99.199.148.6:4338 -Flow 229 not-detected: tcp 10.0.2.15:50275 -> 122.117.100.78:9010 -Flow 781 not-detected: udp 10.0.2.15:28681 -> 112.105.52.2:23458 -Flow 782 not-detected: udp 10.0.2.15:28681 -> 65.182.231.232:7890 -Flow 39 not-detected: tcp 10.0.2.15:50200 -> 176.128.217.128:45194 Flow 769 not-detected: udp 10.0.2.15:28681 -> 123.110.61.169:11973 -Flow 53 not-detected: tcp 10.0.2.15:50213 -> 85.117.153.7:50138 -Flow 82 not-detected: tcp 10.0.2.15:50241 -> 98.18.172.208:63172 -Flow 297 not-detected: tcp 10.0.2.15:50321 -> 213.229.111.224:4876 -Flow 775 not-detected: udp 10.0.2.15:28681 -> 223.17.132.18:23458 -Flow 79 not-detected: tcp 10.0.2.15:50238 -> 124.218.41.253:59144 +Flow 152 not-detected: tcp 10.0.2.15:50265 -> 113.255.250.32:52647 +Flow 59 not-detected: tcp 10.0.2.15:50218 -> 90.103.247.94:59045 Flow 230 not-detected: tcp 10.0.2.15:50276 -> 96.246.156.126:56070 -Flow 70 not-detected: tcp 10.0.2.15:50229 -> 1.36.249.91:64920 -Flow 795 risky: udp 10.0.2.15:28681 -> 213.120.26.86:29946 -Flow 33 not-detected: tcp 10.0.2.15:50195 -> 162.157.143.201:29762 -Flow 91 not-detected: tcp 10.0.2.15:50246 -> 80.7.252.192:45685 +Flow 60 not-detected: tcp 10.0.2.15:50219 -> 193.121.165.12:55376 +Flow 144 not-detected: tcp 10.0.2.15:50257 -> 219.70.48.23:3054 +Flow 58 not-detected: tcp 10.0.2.15:50217 -> 113.252.86.162:54958 +Flow 773 not-detected: udp 10.0.2.15:28681 -> 86.153.21.93:36696 +Flow 74 not-detected: tcp 10.0.2.15:50233 -> 1.163.14.246:12854 +Flow 784 not-detected: udp 10.0.2.15:28681 -> 23.19.141.110:6346 +Flow 234 not-detected: tcp 10.0.2.15:50280 -> 99.199.148.6:4338 Flow 50 not-detected: tcp 10.0.2.15:50210 -> 36.234.18.166:61404 -Flow 45 not-detected: tcp 10.0.2.15:50205 -> 114.46.139.171:52120 -Flow 772 not-detected: udp 10.0.2.15:28681 -> 73.192.231.237:9676 -Flow 770 not-detected: udp 10.0.2.15:28681 -> 97.83.183.148:8890 Flow 235 not-detected: tcp 10.0.2.15:50281 -> 94.134.154.158:54130 -Flow 60 not-detected: tcp 10.0.2.15:50219 -> 193.121.165.12:55376 -Flow 334 risky: tcp 10.0.2.15:50328 -> 189.147.72.83:26108 -Flow 80 not-detected: tcp 10.0.2.15:50239 -> 112.105.52.2:6384 Flow 232 not-detected: tcp 10.0.2.15:50278 -> 36.231.59.187:62234 +Flow 226 not-detected: tcp 10.0.2.15:50272 -> 1.172.184.48:13298 +Flow 771 not-detected: udp 10.0.2.15:28681 -> 202.27.193.6:6346 +Flow 47 not-detected: tcp 10.0.2.15:50207 -> 90.78.171.204:6346 +Flow 92 not-detected: tcp 10.0.2.15:50247 -> 66.30.221.181:51560 +Flow 83 not-detected: tcp 10.0.2.15:50242 -> 109.210.203.131:6346 +Flow 227 not-detected: tcp 10.0.2.15:50273 -> 24.179.18.242:47329 +Flow 781 not-detected: udp 10.0.2.15:28681 -> 112.105.52.2:23458 Flow 766 not-detected: udp 10.0.2.15:28681 -> 76.119.55.28:20347 -Flow 120 not-detected: tcp 10.0.2.15:50251 -> 24.127.1.235:37814 -Flow 144 not-detected: tcp 10.0.2.15:50257 -> 219.70.48.23:3054 +Flow 72 not-detected: tcp 10.0.2.15:50231 -> 76.68.138.207:45079 +Flow 228 not-detected: tcp 10.0.2.15:50274 -> 68.174.18.115:50679 +Flow 84 not-detected: tcp 10.0.2.15:50243 -> 176.138.129.252:27962 +Flow 297 not-detected: tcp 10.0.2.15:50321 -> 213.229.111.224:4876 +Flow 45 not-detected: tcp 10.0.2.15:50205 -> 114.46.139.171:52120 +Flow 334 risky: tcp 10.0.2.15:50328 -> 189.147.72.83:26108 +Flow 777 not-detected: udp 10.0.2.15:28681 -> 124.244.211.43:23459 +Flow 75 not-detected: tcp 10.0.2.15:50234 -> 66.189.28.17:16269 +Flow 796 risky: udp 10.0.2.15:28681 -> 41.249.63.200:22582 +Flow 774 not-detected: udp 10.0.2.15:28681 -> 50.58.238.149:6599 +Flow 145 not-detected: tcp 10.0.2.15:50258 -> 122.100.216.210:7097 +Flow 44 not-detected: tcp 10.0.2.15:50204 -> 124.218.26.16:9728 +Flow 782 not-detected: udp 10.0.2.15:28681 -> 65.182.231.232:7890 +Flow 80 not-detected: tcp 10.0.2.15:50239 -> 112.105.52.2:6384 +Flow 768 not-detected: udp 10.0.2.15:28681 -> 14.200.255.229:37058 +Flow 56 not-detected: tcp 10.0.2.15:50215 -> 124.244.64.237:4704 +Flow 241 not-detected: tcp 10.0.2.15:50287 -> 98.215.130.156:12405 +Flow 82 not-detected: tcp 10.0.2.15:50241 -> 98.18.172.208:63172 Flow 286 not-detected: tcp 10.0.2.15:50310 -> 76.110.153.177:40022 +Flow 245 not-detected: tcp 10.0.2.15:50289 -> 74.195.236.249:18557 +Flow 233 not-detected: tcp 10.0.2.15:50279 -> 113.252.91.201:4297 +Flow 123 not-detected: tcp 10.0.2.15:50254 -> 24.78.134.188:49046 +Flow 48 not-detected: tcp 10.0.2.15:50208 -> 119.237.116.22:8683 +Flow 78 not-detected: tcp 10.0.2.15:50237 -> 88.123.202.175:37910 +Flow 225 not-detected: tcp 10.0.2.15:50271 -> 218.164.198.27:60202 +Flow 33 not-detected: tcp 10.0.2.15:50195 -> 162.157.143.201:29762 +Flow 772 not-detected: udp 10.0.2.15:28681 -> 73.192.231.237:9676 +Flow 120 not-detected: tcp 10.0.2.15:50251 -> 24.127.1.235:37814 Flow 40 not-detected: tcp 10.0.2.15:50201 -> 78.122.93.185:6346 -Flow 58 not-detected: tcp 10.0.2.15:50217 -> 113.252.86.162:54958 -Flow 32 not-detected: tcp 10.0.2.15:50194 -> 92.152.66.153:43771 -Flow 83 not-detected: tcp 10.0.2.15:50242 -> 109.210.203.131:6346 -Flow 66 not-detected: tcp 10.0.2.15:50225 -> 109.210.81.147:24800 +Flow 55 not-detected: tcp 10.0.2.15:50214 -> 80.193.171.146:53808 +Flow 65 not-detected: tcp 10.0.2.15:50224 -> 78.125.63.97:6346 +Flow 229 not-detected: tcp 10.0.2.15:50275 -> 122.117.100.78:9010 +Flow 775 not-detected: udp 10.0.2.15:28681 -> 223.17.132.18:23458 +Flow 795 risky: udp 10.0.2.15:28681 -> 213.120.26.86:29946 +Flow 64 not-detected: tcp 10.0.2.15:50223 -> 118.167.248.220:63108 +Flow 266 not-detected: tcp 10.0.2.15:50290 -> 73.89.249.8:50649 +Flow 70 not-detected: tcp 10.0.2.15:50229 -> 1.36.249.91:64920 +Flow 770 not-detected: udp 10.0.2.15:28681 -> 97.83.183.148:8890 Flow 150 not-detected: tcp 10.0.2.15:50263 -> 73.182.136.42:27873 +Flow 776 not-detected: udp 10.0.2.15:28681 -> 219.85.10.83:8797 +Flow 765 not-detected: udp 10.0.2.15:28681 -> 213.229.111.224:4876 +Flow 240 not-detected: tcp 10.0.2.15:50286 -> 84.118.116.198:44616 +Flow 57 not-detected: tcp 10.0.2.15:50216 -> 182.155.128.228:3256 Flow 62 not-detected: tcp 10.0.2.15:50221 -> 59.104.173.5:49956 +Flow 52 not-detected: tcp 10.0.2.15:50212 -> 95.17.124.40:6776 +Flow 767 not-detected: udp 10.0.2.15:28681 -> 45.65.87.24:16201 +Flow 333 risky: tcp 10.0.2.15:50327 -> 69.118.162.229:46906 +Flow 281 not-detected: tcp 10.0.2.15:50305 -> 94.54.66.82:63637 +Flow 236 not-detected: tcp 10.0.2.15:50282 -> 221.124.66.33:13060 +Flow 39 not-detected: tcp 10.0.2.15:50200 -> 176.128.217.128:45194 +Flow 66 not-detected: tcp 10.0.2.15:50225 -> 109.210.81.147:24800 Flow 780 not-detected: udp 10.0.2.15:28681 -> 68.66.94.132:17735 -Flow 55 not-detected: tcp 10.0.2.15:50214 -> 80.193.171.146:53808 -Flow 231 not-detected: tcp 10.0.2.15:50277 -> 82.181.251.218:36368 +Flow 779 not-detected: udp 10.0.2.15:28681 -> 1.65.217.224:18381 +Flow 89 not-detected: tcp 10.0.2.15:50244 -> 188.61.52.183:63978 +Flow 268 not-detected: tcp 10.0.2.15:50292 -> 95.10.205.67:11603 +Flow 142 not-detected: tcp 10.0.2.15:50255 -> 36.236.203.37:52165 +Flow 53 not-detected: tcp 10.0.2.15:50213 -> 85.117.153.7:50138 +Flow 91 not-detected: tcp 10.0.2.15:50246 -> 80.7.252.192:45685 diff --git a/test/results/flow-captured/default/http_asymmetric.pcapng.out b/test/results/flow-captured/default/http_asymmetric.pcapng.out index e72b81357..a50ff57bf 100644 --- a/test/results/flow-captured/default/http_asymmetric.pcapng.out +++ b/test/results/flow-captured/default/http_asymmetric.pcapng.out @@ -1,2 +1,2 @@ -Flow 2 risky: tcp 192.168.1.146:80 -> 192.168.1.103:1044 Flow 1 risky: tcp 192.168.0.1:1044 -> 10.10.10.1:80 +Flow 2 risky: tcp 192.168.1.146:80 -> 192.168.1.103:1044 diff --git a/test/results/flow-captured/default/instagram.pcap.out b/test/results/flow-captured/default/instagram.pcap.out index 3850d611e..40e5ead10 100644 --- a/test/results/flow-captured/default/instagram.pcap.out +++ b/test/results/flow-captured/default/instagram.pcap.out @@ -2,15 +2,15 @@ Flow 3 midstream: tcp 192.168.0.103:38816 -> 46.33.70.160:80 Flow 4 midstream: tcp 192.168.0.103:57936 -> 82.85.26.162:80 Flow 5 midstream: tcp 192.168.0.103:44379 -> 82.85.26.186:80 Flow 26 midstream: tcp 192.168.0.103:58052 -> 82.85.26.162:80 -Flow 30 midstream: tcp 192.168.0.103:58690 -> 46.33.70.159:443 -Flow 7 guessed: tcp 192.168.0.103:33976 -> 77.67.29.17:80 -Flow 7 not-detected: tcp 192.168.0.103:33976 -> 77.67.29.17:80 -Flow 7 midstream: tcp 192.168.0.103:33976 -> 77.67.29.17:80 Flow 28 guessed: tcp 31.13.86.52:80 -> 192.168.0.103:58216 Flow 28 not-detected: tcp 31.13.86.52:80 -> 192.168.0.103:58216 Flow 28 midstream: tcp 31.13.86.52:80 -> 192.168.0.103:58216 +Flow 30 midstream: tcp 192.168.0.103:58690 -> 46.33.70.159:443 +Flow 2 midstream: tcp 192.168.0.103:33936 -> 31.13.93.52:443 +Flow 11 not-detected: udp 192.168.0.1:520 -> 192.168.0.255:520 Flow 29 guessed: tcp 2.22.236.51:80 -> 192.168.0.103:44151 Flow 29 not-detected: tcp 2.22.236.51:80 -> 192.168.0.103:44151 Flow 29 midstream: tcp 2.22.236.51:80 -> 192.168.0.103:44151 -Flow 2 midstream: tcp 192.168.0.103:33936 -> 31.13.93.52:443 -Flow 11 not-detected: udp 192.168.0.1:520 -> 192.168.0.255:520 +Flow 7 guessed: tcp 192.168.0.103:33976 -> 77.67.29.17:80 +Flow 7 not-detected: tcp 192.168.0.103:33976 -> 77.67.29.17:80 +Flow 7 midstream: tcp 192.168.0.103:33976 -> 77.67.29.17:80 diff --git a/test/results/flow-captured/default/ip_fragmented_garbage.pcap.out b/test/results/flow-captured/default/ip_fragmented_garbage.pcap.out index e491612da..f30c984c9 100644 --- a/test/results/flow-captured/default/ip_fragmented_garbage.pcap.out +++ b/test/results/flow-captured/default/ip_fragmented_garbage.pcap.out @@ -1,5 +1,5 @@ Flow 4 not-detected: tcp 10.0.0.2:16417 -> 10.128.0.2:16419 +Flow 3 not-detected: tcp 10.0.0.2:9253 -> 10.128.0.2:24102 Flow 1 not-detected: tcp 10.0.0.2:24102 -> 10.128.0.2:10792 Flow 2 not-detected: tcp 10.0.0.2:18730 -> 10.128.0.2:20304 Flow 2 midstream: tcp 10.0.0.2:18730 -> 10.128.0.2:20304 -Flow 3 not-detected: tcp 10.0.0.2:9253 -> 10.128.0.2:24102 diff --git a/test/results/flow-captured/default/kafka.pcapng.out b/test/results/flow-captured/default/kafka.pcapng.out index 4b06bf53e..beab6f853 100644 --- a/test/results/flow-captured/default/kafka.pcapng.out +++ b/test/results/flow-captured/default/kafka.pcapng.out @@ -1,7 +1,7 @@ Flow 1 midstream: tcp 172.16.17.101:49280 -> 172.30.0.237:9092 -Flow 3 midstream: tcp 172.16.17.101:40042 -> 172.30.0.237:9092 Flow 4 midstream: tcp 172.16.17.101:56556 -> 172.30.0.237:9092 -Flow 5 midstream: tcp 172.16.17.101:38176 -> 172.30.0.237:9092 +Flow 3 midstream: tcp 172.16.17.101:40042 -> 172.30.0.237:9092 Flow 8 midstream: tcp 172.16.17.101:53052 -> 172.30.0.237:9092 Flow 6 midstream: tcp 172.16.17.101:53768 -> 172.30.0.237:9092 Flow 7 midstream: tcp 172.16.17.101:58300 -> 172.30.0.237:9092 +Flow 5 midstream: tcp 172.16.17.101:38176 -> 172.30.0.237:9092 diff --git a/test/results/flow-captured/default/log4j-webapp-exploit.pcap.out b/test/results/flow-captured/default/log4j-webapp-exploit.pcap.out index e4f62e7b7..eb91456d1 100644 --- a/test/results/flow-captured/default/log4j-webapp-exploit.pcap.out +++ b/test/results/flow-captured/default/log4j-webapp-exploit.pcap.out @@ -1,7 +1,7 @@ Flow 4 not-detected: tcp 172.16.238.10:55408 -> 10.10.10.31:9001 +Flow 2 risky: tcp 172.16.238.10:57650 -> 172.16.238.11:1389 Flow 5 risky: tcp 172.16.238.10:57742 -> 172.16.238.11:1389 -Flow 1 risky: tcp 172.16.238.1:1984 -> 172.16.238.10:8080 Flow 7 not-detected: tcp 172.16.238.10:55498 -> 10.10.10.31:9001 +Flow 1 risky: tcp 172.16.238.1:1984 -> 172.16.238.10:8080 Flow 3 risky: tcp 172.16.238.10:48444 -> 172.16.238.11:80 Flow 6 risky: tcp 172.16.238.10:48534 -> 172.16.238.11:80 -Flow 2 risky: tcp 172.16.238.10:57650 -> 172.16.238.11:1389 diff --git a/test/results/flow-captured/default/lru_ipv6_caches.pcapng.out b/test/results/flow-captured/default/lru_ipv6_caches.pcapng.out index 0247c3886..3756595b8 100644 --- a/test/results/flow-captured/default/lru_ipv6_caches.pcapng.out +++ b/test/results/flow-captured/default/lru_ipv6_caches.pcapng.out @@ -1,4 +1,4 @@ -Flow 2 risky: udp 3991:72d:336e:65ec:c5bf:a5fa:83ad:23de:6881 -> 3024:e5ee:ac2f:cd76:5dd6:a7a1:f17f:5c27:60506 Flow 7 risky: udp 2118:ec33:112b:7908:2c80:27ff:fef7:d71f:48415 -> 32fb:f967:681e:e96b:face:b00c::74fd:3478 Flow 12 risky: udp 3069:c624:1d42:9469:98b1:67ff:fe43:325:56131 -> 32fb:f967:681e:e96b:face:b00c::74fd:3478 Flow 3 risky: udp 2a2f:8509:1cb2:466d:ecbf:69d6:109c:608:62229 -> 3991:72d:336e:65ec:c5bf:a5fa:83ad:23de:6881 +Flow 2 risky: udp 3991:72d:336e:65ec:c5bf:a5fa:83ad:23de:6881 -> 3024:e5ee:ac2f:cd76:5dd6:a7a1:f17f:5c27:60506 diff --git a/test/results/flow-captured/default/mssql_tds.pcap.out b/test/results/flow-captured/default/mssql_tds.pcap.out index d4890f968..b3fb205a8 100644 --- a/test/results/flow-captured/default/mssql_tds.pcap.out +++ b/test/results/flow-captured/default/mssql_tds.pcap.out @@ -1,11 +1,11 @@ Flow 1 midstream: tcp 10.111.111.111:1111 -> 10.0.0.1:1433 -Flow 10 midstream: tcp 10.111.111.111:11111 -> 10.0.0.1:1433 Flow 3 midstream: tcp 10.111.111.111:3333 -> 10.0.0.1:1433 +Flow 4 midstream: tcp 10.111.111.111:4444 -> 10.0.0.1:1433 Flow 5 midstream: tcp 10.111.111.111:5555 -> 10.0.0.1:1433 Flow 7 midstream: tcp 10.111.111.111:7777 -> 10.0.0.1:1433 -Flow 11 midstream: tcp 10.111.111.111:22222 -> 10.0.0.1:1433 +Flow 8 midstream: tcp 10.111.111.111:8888 -> 10.0.0.1:1433 Flow 9 midstream: tcp 10.111.111.111:9999 -> 10.0.0.1:1433 -Flow 2 midstream: tcp 10.111.111.111:2222 -> 10.0.0.1:1433 -Flow 4 midstream: tcp 10.111.111.111:4444 -> 10.0.0.1:1433 +Flow 10 midstream: tcp 10.111.111.111:11111 -> 10.0.0.1:1433 +Flow 11 midstream: tcp 10.111.111.111:22222 -> 10.0.0.1:1433 Flow 12 midstream: tcp 10.111.111.111:33333 -> 10.0.0.1:1433 -Flow 8 midstream: tcp 10.111.111.111:8888 -> 10.0.0.1:1433 +Flow 2 midstream: tcp 10.111.111.111:2222 -> 10.0.0.1:1433 diff --git a/test/results/flow-captured/default/netflix.pcap.out b/test/results/flow-captured/default/netflix.pcap.out index dad38067c..728e0bf24 100644 --- a/test/results/flow-captured/default/netflix.pcap.out +++ b/test/results/flow-captured/default/netflix.pcap.out @@ -13,12 +13,12 @@ Flow 40 risky: tcp 192.168.1.7:53179 -> 23.246.11.141:80 Flow 37 risky: tcp 192.168.1.7:53176 -> 23.246.11.141:80 Flow 44 risky: tcp 192.168.1.7:53183 -> 23.246.3.140:80 Flow 2 risky: udp 192.168.1.7:51543 -> 192.168.1.1:53 -Flow 47 risky: tcp 192.168.1.7:53202 -> 54.191.17.51:443 Flow 28 risky: tcp 192.168.1.7:53153 -> 184.25.204.24:80 -Flow 14 risky: tcp 192.168.1.7:53132 -> 52.89.39.139:443 -Flow 15 risky: tcp 192.168.1.7:53133 -> 52.89.39.139:443 Flow 52 risky: udp 192.168.1.7:51622 -> 192.168.1.1:53 Flow 57 risky: tcp 192.168.1.7:53249 -> 52.41.30.5:443 +Flow 47 risky: tcp 192.168.1.7:53202 -> 54.191.17.51:443 +Flow 14 risky: tcp 192.168.1.7:53132 -> 52.89.39.139:443 +Flow 15 risky: tcp 192.168.1.7:53133 -> 52.89.39.139:443 Flow 31 risky: tcp 192.168.1.7:53164 -> 23.246.10.139:80 Flow 45 risky: tcp 192.168.1.7:53184 -> 23.246.11.141:80 Flow 50 risky: tcp 192.168.1.7:53210 -> 23.246.11.133:80 diff --git a/test/results/flow-captured/default/nfsv2.pcap.out b/test/results/flow-captured/default/nfsv2.pcap.out index 0f5483abe..b24d710a1 100644 --- a/test/results/flow-captured/default/nfsv2.pcap.out +++ b/test/results/flow-captured/default/nfsv2.pcap.out @@ -1,5 +1,5 @@ +Flow 2 risky: udp 139.25.22.2:671 -> 139.25.22.102:1048 +Flow 7 risky: udp 139.25.22.2:686 -> 139.25.22.102:1048 Flow 1 risky: udp 139.25.22.2:3289 -> 139.25.22.102:111 Flow 3 risky: udp 139.25.22.2:3291 -> 139.25.22.102:111 Flow 6 risky: udp 139.25.22.2:3293 -> 139.25.22.102:111 -Flow 2 risky: udp 139.25.22.2:671 -> 139.25.22.102:1048 -Flow 7 risky: udp 139.25.22.2:686 -> 139.25.22.102:1048 diff --git a/test/results/flow-captured/default/nfsv3.pcap.out b/test/results/flow-captured/default/nfsv3.pcap.out index 8c97e0992..5f7d94ba9 100644 --- a/test/results/flow-captured/default/nfsv3.pcap.out +++ b/test/results/flow-captured/default/nfsv3.pcap.out @@ -1,6 +1,6 @@ +Flow 3 risky: udp 139.25.22.2:706 -> 139.25.22.102:1048 +Flow 8 risky: udp 139.25.22.2:722 -> 139.25.22.102:1048 Flow 1 risky: udp 139.25.22.2:3295 -> 139.25.22.102:111 Flow 4 risky: udp 139.25.22.2:3297 -> 139.25.22.102:111 Flow 7 risky: udp 139.25.22.2:3299 -> 139.25.22.102:111 -Flow 3 risky: udp 139.25.22.2:706 -> 139.25.22.102:1048 -Flow 8 risky: udp 139.25.22.2:722 -> 139.25.22.102:1048 Flow 2 risky: udp 139.25.22.2:3296 -> 139.25.22.102:1048 diff --git a/test/results/flow-captured/default/openvpn_obfuscated.pcapng.out b/test/results/flow-captured/default/openvpn_obfuscated.pcapng.out index 073dd5a71..e8c38bf29 100644 --- a/test/results/flow-captured/default/openvpn_obfuscated.pcapng.out +++ b/test/results/flow-captured/default/openvpn_obfuscated.pcapng.out @@ -1,4 +1,4 @@ -Flow 1 guessed: tcp 192.168.12.156:37976 -> 185.128.25.99:465 -Flow 1 not-detected: tcp 192.168.12.156:37976 -> 185.128.25.99:465 Flow 3 guessed: tcp 107.161.86.131:443 -> 192.168.12.156:48072 Flow 3 not-detected: tcp 107.161.86.131:443 -> 192.168.12.156:48072 +Flow 1 guessed: tcp 192.168.12.156:37976 -> 185.128.25.99:465 +Flow 1 not-detected: tcp 192.168.12.156:37976 -> 185.128.25.99:465 diff --git a/test/results/flow-captured/default/quic_interop_V.pcapng.out b/test/results/flow-captured/default/quic_interop_V.pcapng.out index a3bfc5fcb..ee20aca3d 100644 --- a/test/results/flow-captured/default/quic_interop_V.pcapng.out +++ b/test/results/flow-captured/default/quic_interop_V.pcapng.out @@ -1,36 +1,36 @@ -Flow 21 risky: udp 192.168.1.128:59171 -> 193.190.10.98:4433 -Flow 8 risky: udp 192.168.1.128:46576 -> 40.112.191.60:4433 -Flow 34 risky: icmp 131.159.24.198 -> 192.168.1.128 -Flow 1 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:38077 -> 2400:8902::f03c:91ff:fe69:a454:443 +Flow 64 risky: udp 192.168.1.128:53402 -> 3.121.242.54:4434 +Flow 2 risky: udp 192.168.1.128:37643 -> 71.202.41.169:443 +Flow 47 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:46242 -> 2600:1f18:2310:d230:5103:7d9e:7d75:374f:443 +Flow 58 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:41857 -> 2606:4700:10::6816:826:4434 +Flow 25 risky: udp 192.168.1.128:37661 -> 71.202.41.169:4433 +Flow 71 risky: icmp 202.238.220.92 -> 192.168.1.128 +Flow 75 risky: icmp 133.242.206.244 -> 192.168.1.128 Flow 13 risky: udp 192.168.1.128:60784 -> 3.121.242.54:4433 -Flow 38 risky: udp 192.168.1.128:50289 -> 71.202.41.169:4434 -Flow 15 risky: udp 192.168.1.128:34511 -> 131.159.24.198:443 -Flow 45 risky: udp 192.168.1.128:59515 -> 193.190.10.98:4434 -Flow 31 risky: udp 192.168.1.128:38933 -> 202.238.220.92:443 Flow 26 risky: udp 192.168.1.128:37784 -> 140.227.52.92:443 Flow 11 risky: icmp 3.121.242.54 -> 192.168.1.128 Flow 56 risky: udp 192.168.1.128:39975 -> 138.91.188.147:443 -Flow 52 risky: udp 192.168.1.128:35263 -> 202.238.220.92:4434 -Flow 55 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:44924 -> 2400:8902::f03c:91ff:fe69:a454:4434 -Flow 36 risky: udp 192.168.1.128:42456 -> 133.242.206.244:443 -Flow 75 risky: icmp 133.242.206.244 -> 192.168.1.128 +Flow 1 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:38077 -> 2400:8902::f03c:91ff:fe69:a454:443 Flow 28 risky: udp 192.168.1.128:49658 -> 193.190.10.98:443 +Flow 31 risky: udp 192.168.1.128:38933 -> 202.238.220.92:443 +Flow 52 risky: udp 192.168.1.128:35263 -> 202.238.220.92:4434 Flow 62 risky: udp 192.168.1.128:42468 -> 138.91.188.147:4433 -Flow 57 risky: udp 192.168.1.128:50705 -> 138.91.188.147:4434 -Flow 64 risky: udp 192.168.1.128:53402 -> 3.121.242.54:4434 -Flow 48 risky: udp 192.168.1.128:44619 -> 140.227.52.92:4433 -Flow 44 risky: udp 192.168.1.128:53791 -> 40.112.191.60:4434 -Flow 18 risky: udp 192.168.1.128:49151 -> 133.242.206.244:4433 -Flow 12 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:32957 -> 2606:4700:10::6816:826:4433 -Flow 72 risky: icmp 18.189.84.245 -> 192.168.1.128 -Flow 47 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:46242 -> 2600:1f18:2310:d230:5103:7d9e:7d75:374f:443 Flow 10 risky: udp 192.168.1.128:38366 -> 202.238.220.92:4433 -Flow 23 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:56213 -> 2400:8902::f03c:91ff:fe69:a454:4433 +Flow 36 risky: udp 192.168.1.128:42456 -> 133.242.206.244:443 Flow 30 risky: icmp 51.158.105.98 -> 192.168.1.128 -Flow 25 risky: udp 192.168.1.128:37661 -> 71.202.41.169:4433 -Flow 71 risky: icmp 202.238.220.92 -> 192.168.1.128 +Flow 34 risky: icmp 131.159.24.198 -> 192.168.1.128 +Flow 38 risky: udp 192.168.1.128:50289 -> 71.202.41.169:4434 +Flow 48 risky: udp 192.168.1.128:44619 -> 140.227.52.92:4433 Flow 9 risky: udp 192.168.1.128:46334 -> 40.112.191.60:443 +Flow 15 risky: udp 192.168.1.128:34511 -> 131.159.24.198:443 +Flow 55 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:44924 -> 2400:8902::f03c:91ff:fe69:a454:4434 +Flow 57 risky: udp 192.168.1.128:50705 -> 138.91.188.147:4434 Flow 42 risky: udp 192.168.1.128:45855 -> 133.242.206.244:4434 -Flow 58 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:41857 -> 2606:4700:10::6816:826:4434 -Flow 2 risky: udp 192.168.1.128:37643 -> 71.202.41.169:443 +Flow 21 risky: udp 192.168.1.128:59171 -> 193.190.10.98:4433 +Flow 8 risky: udp 192.168.1.128:46576 -> 40.112.191.60:4433 +Flow 45 risky: udp 192.168.1.128:59515 -> 193.190.10.98:4434 +Flow 72 risky: icmp 18.189.84.245 -> 192.168.1.128 +Flow 18 risky: udp 192.168.1.128:49151 -> 133.242.206.244:4433 +Flow 12 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:32957 -> 2606:4700:10::6816:826:4433 +Flow 44 risky: udp 192.168.1.128:53791 -> 40.112.191.60:4434 +Flow 23 risky: udp 2001:b07:ac9:d5ae:a4d3:fe47:691e:807d:56213 -> 2400:8902::f03c:91ff:fe69:a454:4433 Flow 66 risky: udp 192.168.1.128:57926 -> 140.227.52.92:4434 diff --git a/test/results/flow-captured/default/quic_sh.pcap.out b/test/results/flow-captured/default/quic_sh.pcap.out index b81c51fc0..fed02077b 100644 --- a/test/results/flow-captured/default/quic_sh.pcap.out +++ b/test/results/flow-captured/default/quic_sh.pcap.out @@ -1,3 +1,3 @@ Flow 3 risky: udp 192.168.1.245:40408 -> 13.226.175.53:443 -Flow 1 risky: udp 2001:b07:a3d:c112:91b7:b97e:6e2:fad8:37542 -> 2606:4700:7::a29f:9804:443 Flow 2 risky: udp 2a00:1450:4002:411::200e:443 -> 2001:b07:a3d:c112:91b7:b97e:6e2:fad8:33144 +Flow 1 risky: udp 2001:b07:a3d:c112:91b7:b97e:6e2:fad8:37542 -> 2606:4700:7::a29f:9804:443 diff --git a/test/results/flow-captured/default/quickplay.pcap.out b/test/results/flow-captured/default/quickplay.pcap.out index ab414a2de..ed22501d6 100644 --- a/test/results/flow-captured/default/quickplay.pcap.out +++ b/test/results/flow-captured/default/quickplay.pcap.out @@ -1,18 +1,18 @@ Flow 11 midstream: tcp 10.54.169.250:52009 -> 120.28.35.40:80 Flow 13 risky: tcp 10.54.169.250:54885 -> 203.205.151.160:80 Flow 13 midstream: tcp 10.54.169.250:54885 -> 203.205.151.160:80 +Flow 15 risky: tcp 10.54.169.250:35670 -> 203.205.147.215:80 +Flow 15 midstream: tcp 10.54.169.250:35670 -> 203.205.147.215:80 Flow 1 midstream: tcp 10.54.169.250:50668 -> 120.28.35.41:80 Flow 2 midstream: tcp 10.54.169.250:50669 -> 120.28.35.41:80 -Flow 7 midstream: tcp 10.54.169.250:44793 -> 31.13.68.49:80 +Flow 19 midstream: tcp 10.54.169.250:52019 -> 120.28.35.40:80 Flow 12 risky: tcp 10.54.169.250:42761 -> 203.205.129.101:80 Flow 12 midstream: tcp 10.54.169.250:42761 -> 203.205.129.101:80 Flow 14 risky: tcp 10.54.169.250:42762 -> 203.205.129.101:80 Flow 14 midstream: tcp 10.54.169.250:42762 -> 203.205.129.101:80 -Flow 6 midstream: tcp 10.54.169.250:33277 -> 120.28.26.231:80 Flow 16 risky: tcp 10.54.169.250:56381 -> 54.179.140.65:80 Flow 16 midstream: tcp 10.54.169.250:56381 -> 54.179.140.65:80 -Flow 19 midstream: tcp 10.54.169.250:52019 -> 120.28.35.40:80 +Flow 6 midstream: tcp 10.54.169.250:33277 -> 120.28.26.231:80 +Flow 7 midstream: tcp 10.54.169.250:44793 -> 31.13.68.49:80 Flow 4 midstream: tcp 10.54.169.250:52285 -> 173.252.74.22:80 Flow 5 midstream: tcp 10.54.169.250:52288 -> 173.252.74.22:80 -Flow 15 risky: tcp 10.54.169.250:35670 -> 203.205.147.215:80 -Flow 15 midstream: tcp 10.54.169.250:35670 -> 203.205.147.215:80 diff --git a/test/results/flow-captured/default/shell.pcap.out b/test/results/flow-captured/default/shell.pcap.out index a84f36af1..173f9d6a2 100644 --- a/test/results/flow-captured/default/shell.pcap.out +++ b/test/results/flow-captured/default/shell.pcap.out @@ -1,4 +1,4 @@ -Flow 4 not-detected: tcp 127.0.0.1:54970 -> 127.0.0.1:33333 Flow 1 not-detected: tcp 127.0.0.1:47638 -> 127.0.0.1:33333 Flow 2 not-detected: udp 127.0.0.1:54112 -> 127.0.0.1:33333 +Flow 4 not-detected: tcp 127.0.0.1:54970 -> 127.0.0.1:33333 Flow 3 not-detected: udp 127.0.0.1:58538 -> 127.0.0.1:33333 diff --git a/test/results/flow-captured/default/smtp-starttls.pcap.out b/test/results/flow-captured/default/smtp-starttls.pcap.out index 91d1e8a54..e1a4b74a1 100644 --- a/test/results/flow-captured/default/smtp-starttls.pcap.out +++ b/test/results/flow-captured/default/smtp-starttls.pcap.out @@ -1,2 +1,2 @@ -Flow 2 risky: tcp 2003:de:2016:125:fc36:8317:4e86:cb72:7562 -> 2003:de:2016:120::a08:53:25 Flow 1 risky: tcp 10.0.0.1:57406 -> 173.194.68.26:25 +Flow 2 risky: tcp 2003:de:2016:125:fc36:8317:4e86:cb72:7562 -> 2003:de:2016:120::a08:53:25 diff --git a/test/results/flow-captured/default/snmp.pcap.out b/test/results/flow-captured/default/snmp.pcap.out index 33dbcd827..6451800e4 100644 --- a/test/results/flow-captured/default/snmp.pcap.out +++ b/test/results/flow-captured/default/snmp.pcap.out @@ -1,2 +1,2 @@ -Flow 17 risky: udp 10.99.8.88:43242 -> 10.100.253.146:161 Flow 16 risky: udp 10.231.2.134:161 -> 10.72.247.4:61088 +Flow 17 risky: udp 10.99.8.88:43242 -> 10.100.253.146:161 diff --git a/test/results/flow-captured/default/someip-udp-method-call.pcapng.out b/test/results/flow-captured/default/someip-udp-method-call.pcapng.out index d2e47e1c7..b9ccafd8f 100644 --- a/test/results/flow-captured/default/someip-udp-method-call.pcapng.out +++ b/test/results/flow-captured/default/someip-udp-method-call.pcapng.out @@ -1,2 +1,2 @@ -Flow 2 risky: udp 192.168.0.125:49191 -> 192.168.0.1:49201 Flow 1 risky: udp 192.168.0.1:49190 -> 224.0.0.1:49190 +Flow 2 risky: udp 192.168.0.125:49191 -> 192.168.0.1:49201 diff --git a/test/results/flow-captured/default/starcraft_battle.pcap.out b/test/results/flow-captured/default/starcraft_battle.pcap.out index 7496cc0bb..8dc2218fe 100644 --- a/test/results/flow-captured/default/starcraft_battle.pcap.out +++ b/test/results/flow-captured/default/starcraft_battle.pcap.out @@ -1,6 +1,4 @@ Flow 15 risky: tcp 192.168.1.100:3508 -> 87.248.221.254:80 -Flow 28 risky: udp 192.168.1.100:53145 -> 192.168.1.254:53 -Flow 44 risky: udp 192.168.1.100:55468 -> 192.168.1.254:53 Flow 24 midstream: tcp 192.168.1.100:3479 -> 2.228.46.114:443 Flow 22 midstream: tcp 192.168.1.100:3480 -> 2.228.46.114:443 Flow 23 midstream: tcp 192.168.1.100:3481 -> 2.228.46.114:443 @@ -9,8 +7,10 @@ Flow 18 midstream: tcp 192.168.1.100:3489 -> 2.228.46.104:443 Flow 19 midstream: tcp 192.168.1.100:3490 -> 2.228.46.104:443 Flow 20 midstream: tcp 192.168.1.100:3491 -> 2.228.46.104:443 Flow 17 midstream: tcp 192.168.1.100:3492 -> 2.228.46.104:443 -Flow 14 risky: udp 192.168.1.100:60026 -> 192.168.1.254:53 +Flow 28 risky: udp 192.168.1.100:53145 -> 192.168.1.254:53 +Flow 44 risky: udp 192.168.1.100:55468 -> 192.168.1.254:53 Flow 2 risky: udp 192.168.1.100:58818 -> 192.168.1.254:53 Flow 4 risky: udp 192.168.1.100:58831 -> 192.168.1.254:53 Flow 9 risky: udp 192.168.1.100:58851 -> 192.168.1.254:53 Flow 16 risky: tcp 192.168.1.100:3512 -> 12.129.222.54:80 +Flow 14 risky: udp 192.168.1.100:60026 -> 192.168.1.254:53 diff --git a/test/results/flow-captured/default/stun.pcap.out b/test/results/flow-captured/default/stun.pcap.out index 19e9b46e3..9752d2d8d 100644 --- a/test/results/flow-captured/default/stun.pcap.out +++ b/test/results/flow-captured/default/stun.pcap.out @@ -1,3 +1,3 @@ -Flow 2 risky: udp 192.168.12.169:43016 -> 74.125.247.128:3478 Flow 3 risky: icmp 192.168.12.169 -> 74.125.247.128 +Flow 2 risky: udp 192.168.12.169:43016 -> 74.125.247.128:3478 Flow 5 risky: udp 192.168.12.169:38123 -> 31.13.86.54:40003 diff --git a/test/results/flow-captured/default/stun_dtls_rtp_unidir.pcapng.out b/test/results/flow-captured/default/stun_dtls_rtp_unidir.pcapng.out index d234da29e..f76511d6a 100644 --- a/test/results/flow-captured/default/stun_dtls_rtp_unidir.pcapng.out +++ b/test/results/flow-captured/default/stun_dtls_rtp_unidir.pcapng.out @@ -1,2 +1,2 @@ -Flow 1 risky: udp 10.10.0.1:65226 -> 10.1.0.3:57730 Flow 2 risky: udp 10.1.0.3:5853 -> 10.10.0.1:2808 +Flow 1 risky: udp 10.10.0.1:65226 -> 10.1.0.3:57730 diff --git a/test/results/flow-captured/default/stun_google_meet.pcapng.out b/test/results/flow-captured/default/stun_google_meet.pcapng.out index d406e6c37..02e818397 100644 --- a/test/results/flow-captured/default/stun_google_meet.pcapng.out +++ b/test/results/flow-captured/default/stun_google_meet.pcapng.out @@ -1,4 +1,4 @@ Flow 3 risky: udp 192.168.12.156:38152 -> 142.250.82.76:19305 -Flow 2 risky: udp 192.168.12.156:45400 -> 74.125.128.127:19302 Flow 1 risky: udp 192.168.12.156:38152 -> 74.125.128.127:19302 +Flow 2 risky: udp 192.168.12.156:45400 -> 74.125.128.127:19302 Flow 7 risky: udp 2001:b07:a3d:c112:48a1:1094:1227:281e:45572 -> 2001:4860:4864:6::81:19305 diff --git a/test/results/flow-captured/default/stun_signal.pcapng.out b/test/results/flow-captured/default/stun_signal.pcapng.out index cf96af8df..7a30a2de8 100644 --- a/test/results/flow-captured/default/stun_signal.pcapng.out +++ b/test/results/flow-captured/default/stun_signal.pcapng.out @@ -3,14 +3,14 @@ Flow 7 risky: icmp 35.158.183.167 -> 192.168.12.169 Flow 3 risky: udp 192.168.12.169:47204 -> 35.158.183.167:443 Flow 6 risky: udp 192.168.12.169:39518 -> 35.158.183.167:443 Flow 23 risky: udp 192.168.12.169:47767 -> 18.195.131.143:61498 -Flow 9 risky: udp 192.168.12.169:43068 -> 35.158.183.167:443 +Flow 11 risky: udp 192.168.12.169:39950 -> 172.253.121.127:19302 Flow 10 risky: udp 192.168.12.169:43068 -> 172.253.121.127:19302 Flow 12 risky: udp 192.168.12.169:39950 -> 35.158.183.167:443 -Flow 11 risky: udp 192.168.12.169:39950 -> 172.253.121.127:19302 -Flow 20 risky: udp 192.168.12.169:37970 -> 35.158.122.211:3478 +Flow 9 risky: udp 192.168.12.169:43068 -> 35.158.183.167:443 Flow 17 risky: udp 192.168.12.169:47767 -> 35.158.122.211:443 -Flow 15 risky: udp 192.168.12.169:47767 -> 172.253.121.127:19302 -Flow 18 risky: udp 192.168.12.169:37970 -> 35.158.122.211:443 Flow 16 risky: udp 192.168.12.169:37970 -> 172.253.121.127:19302 -Flow 21 risky: icmp 35.158.122.211 -> 192.168.12.169 Flow 19 risky: udp 192.168.12.169:47767 -> 35.158.122.211:3478 +Flow 15 risky: udp 192.168.12.169:47767 -> 172.253.121.127:19302 +Flow 21 risky: icmp 35.158.122.211 -> 192.168.12.169 +Flow 18 risky: udp 192.168.12.169:37970 -> 35.158.122.211:443 +Flow 20 risky: udp 192.168.12.169:37970 -> 35.158.122.211:3478 diff --git a/test/results/flow-captured/default/stun_wa_call.pcapng.out b/test/results/flow-captured/default/stun_wa_call.pcapng.out index 0d1b98afe..dc9da1022 100644 --- a/test/results/flow-captured/default/stun_wa_call.pcapng.out +++ b/test/results/flow-captured/default/stun_wa_call.pcapng.out @@ -4,6 +4,6 @@ Flow 2 risky: udp 192.168.12.156:46652 -> 157.240.203.62:3478 Flow 4 risky: udp 192.168.12.156:46652 -> 157.240.21.51:3478 Flow 5 risky: udp 192.168.12.156:46652 -> 157.240.195.48:3478 Flow 3 risky: udp 192.168.12.156:46652 -> 157.240.231.62:3478 -Flow 13 risky: icmp 93.63.100.129 -> 192.168.12.156 -Flow 11 risky: udp 192.168.12.156:49526 -> 10.82.40.241:40436 Flow 12 risky: udp 192.168.12.156:49526 -> 93.33.118.87:41107 +Flow 11 risky: udp 192.168.12.156:49526 -> 10.82.40.241:40436 +Flow 13 risky: icmp 93.63.100.129 -> 192.168.12.156 diff --git a/test/results/flow-captured/default/synscan.pcap.out b/test/results/flow-captured/default/synscan.pcap.out index 256ce0946..ad08ea4f4 100644 --- a/test/results/flow-captured/default/synscan.pcap.out +++ b/test/results/flow-captured/default/synscan.pcap.out @@ -1,773 +1,152 @@ -Flow 716 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3390 -Flow 1633 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9535 -Flow 789 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3390 -Flow 1708 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9535 -Flow 378 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5440 -Flow 406 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5440 -Flow 990 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50500 -Flow 381 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19780 -Flow 1057 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50500 -Flow 403 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19780 -Flow 206 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7496 -Flow 250 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7496 -Flow 1073 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3404 -Flow 1124 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3404 -Flow 597 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7512 -Flow 996 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19801 -Flow 658 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7512 -Flow 1051 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19801 -Flow 184 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9575 -Flow 231 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9575 -Flow 423 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9593 -Flow 1044 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9594 -Flow 443 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9593 -Flow 1111 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9594 -Flow 511 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9595 -Flow 560 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9595 -Flow 275 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5500 -Flow 304 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5500 -Flow 455 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15742 -Flow 493 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15742 -Flow 687 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19842 -Flow 760 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19842 -Flow 794 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5510 -Flow 861 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5510 -Flow 55 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1417 -Flow 73 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1417 -Flow 920 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9618 -Flow 977 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9618 -Flow 1317 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:38292 -Flow 351 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3476 -Flow 1380 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:38292 -Flow 392 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3476 -Flow 1651 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13722 -Flow 1288 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44442 -Flow 1362 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44442 -Flow 1720 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13722 -Flow 919 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44443 -Flow 978 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44443 -Flow 1335 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:56737 -Flow 1643 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:56738 -Flow 1410 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:56737 -Flow 1728 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:56738 -Flow 997 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1443 -Flow 1050 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1443 -Flow 336 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3493 -Flow 366 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3493 -Flow 1254 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5544 -Flow 1306 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5544 -Flow 1621 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5550 -Flow 1684 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5550 -Flow 575 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1455 -Flow 645 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1455 -Flow 1790 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5555 -Flow 1867 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5555 -Flow 432 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1461 -Flow 475 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1461 -Flow 868 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5560 -Flow 937 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5560 -Flow 520 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3517 -Flow 795 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5566 -Flow 551 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3517 -Flow 860 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5566 -Flow 1441 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52673 -Flow 1505 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52673 -Flow 264 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9666 -Flow 315 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9666 -Flow 1098 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3527 -Flow 1157 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3527 -Flow 625 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7625 -Flow 712 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7625 -Flow 1539 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7627 -Flow 1799 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50636 -Flow 1614 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7627 -Flow 1858 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50636 -Flow 370 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44501 -Flow 90 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:17877 -Flow 414 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44501 -Flow 1021 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13782 -Flow 119 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:17877 -Flow 1175 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13783 -Flow 1084 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13782 -Flow 1232 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13783 -Flow 688 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3546 -Flow 759 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3546 -Flow 1488 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1500 -Flow 1561 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1500 -Flow 1244 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1501 -Flow 1316 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1501 -Flow 1482 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1503 -Flow 1256 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3551 -Flow 1567 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1503 -Flow 1304 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3551 -Flow 96 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:65000 -Flow 113 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:65000 -Flow 344 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1524 -Flow 399 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1524 -Flow 1039 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3580 -Flow 107 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7676 -Flow 1116 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3580 -Flow 1072 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1533 -Flow 143 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7676 -Flow 1125 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1533 -Flow 356 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5631 -Flow 387 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5631 -Flow 1697 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5633 -Flow 1760 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5633 -Flow 1829 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:42510 -Flow 1902 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:42510 -Flow 1528 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1556 -Flow 1605 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1556 -Flow 1475 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5666 -Flow 1574 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5666 -Flow 580 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20005 -Flow 640 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20005 -Flow 948 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:28201 -Flow 1007 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:28201 -Flow 1784 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1580 -Flow 1873 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1580 -Flow 1839 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5678 -Flow 1922 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5678 -Flow 915 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5679 -Flow 190 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1583 -Flow 982 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5679 -Flow 225 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1583 -Flow 95 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1594 -Flow 114 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1594 -Flow 458 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7741 -Flow 490 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7741 -Flow 540 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20031 -Flow 873 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1600 -Flow 607 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20031 -Flow 932 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1600 -Flow 801 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:17988 -Flow 854 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:17988 -Flow 890 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3659 -Flow 965 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3659 -Flow 1737 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52822 -Flow 804 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5718 -Flow 1817 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52822 -Flow 851 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5718 -Flow 91 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7777 -Flow 913 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7778 -Flow 518 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5730 -Flow 118 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7777 -Flow 984 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7778 -Flow 553 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5730 -Flow 1594 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:26214 -Flow 1656 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:26214 -Flow 1838 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3689 -Flow 565 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:65129 -Flow 186 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1641 -Flow 1923 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3689 -Flow 1093 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3690 -Flow 655 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:65129 -Flow 229 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1641 -Flow 1162 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3690 -Flow 922 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50800 -Flow 134 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52848 -Flow 975 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50800 -Flow 158 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52848 -Flow 1589 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3703 -Flow 888 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:18040 -Flow 1661 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3703 -Flow 382 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7800 -Flow 967 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:18040 -Flow 402 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7800 -Flow 724 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1658 -Flow 781 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1658 -Flow 722 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16000 -Flow 783 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16000 -Flow 354 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16001 -Flow 389 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16001 -Flow 384 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1666 -Flow 400 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1666 -Flow 334 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52869 -Flow 368 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52869 -Flow 1472 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16012 -Flow 1577 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16012 -Flow 698 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16016 -Flow 749 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16016 -Flow 1738 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16018 -Flow 1816 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16018 -Flow 743 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9876 -Flow 1893 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9877 -Flow 812 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9876 -Flow 1959 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9877 -Flow 1023 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9878 -Flow 1082 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9878 -Flow 51 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1687 -Flow 440 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1688 -Flow 77 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1687 -Flow 467 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1688 -Flow 337 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3737 -Flow 365 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3737 -Flow 1296 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1700 -Flow 1354 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1700 -Flow 1374 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5801 -Flow 1445 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5801 -Flow 995 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5802 -Flow 188 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9898 -Flow 1052 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5802 -Flow 227 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9898 -Flow 881 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9900 -Flow 924 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9900 -Flow 172 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14000 -Flow 202 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14000 -Flow 629 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5810 -Flow 708 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5810 -Flow 430 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5811 -Flow 477 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5811 -Flow 1221 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1717 -Flow 953 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:18101 -Flow 1002 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:18101 -Flow 1277 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1717 -Flow 872 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3766 -Flow 721 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1718 -Flow 1469 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5815 -Flow 933 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3766 -Flow 784 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1718 -Flow 1532 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5815 -Flow 719 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1721 -Flow 786 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1721 -Flow 30 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1723 -Flow 69 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1723 -Flow 112 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9917 -Flow 139 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9917 -Flow 129 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5822 -Flow 255 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:11967 -Flow 163 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5822 -Flow 283 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:11967 -Flow 187 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5825 -Flow 228 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5825 -Flow 420 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3784 -Flow 446 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3784 -Flow 94 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16080 -Flow 115 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16080 -Flow 729 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9943 -Flow 776 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9943 -Flow 1251 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3800 -Flow 499 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9944 -Flow 1309 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3800 -Flow 800 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3801 -Flow 532 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9944 -Flow 855 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3801 -Flow 596 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5850 -Flow 1626 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1755 -Flow 659 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5850 -Flow 1715 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1755 -Flow 986 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12000 -Flow 1061 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12000 -Flow 545 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1761 -Flow 358 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3809 -Flow 602 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1761 -Flow 385 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3809 -Flow 1641 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5859 -Flow 1700 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5859 -Flow 1889 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5862 -Flow 291 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3814 -Flow 1963 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5862 -Flow 502 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7911 -Flow 329 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3814 -Flow 529 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7911 -Flow 1847 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7920 -Flow 879 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9968 -Flow 1350 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16113 -Flow 1914 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7920 -Flow 1171 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7921 -Flow 926 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9968 -Flow 1426 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16113 -Flow 1236 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7921 -Flow 125 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3826 -Flow 357 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3827 -Flow 167 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3826 -Flow 1787 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3828 -Flow 386 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3827 -Flow 1870 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3828 -Flow 1027 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5877 -Flow 1104 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1782 -Flow 1078 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5877 -Flow 1151 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1782 -Flow 1014 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1783 -Flow 1091 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1783 -Flow 1674 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20221 -Flow 1753 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20221 -Flow 342 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20222 -Flow 360 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20222 -Flow 848 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7937 -Flow 1197 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7938 -Flow 899 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7937 -Flow 1259 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7938 -Flow 1841 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1801 -Flow 1920 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1801 -Flow 885 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:34571 -Flow 614 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3851 -Flow 970 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:34571 -Flow 590 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:34572 -Flow 683 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3851 -Flow 1046 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:34573 -Flow 665 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:34572 -Flow 453 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1805 -Flow 1691 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9998 -Flow 1109 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:34573 -Flow 1022 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5902 -Flow 495 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1805 -Flow 1766 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9998 Flow 1534 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55055 -Flow 1083 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5902 -Flow 103 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5903 Flow 1791 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55056 Flow 1619 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55055 -Flow 1653 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5904 -Flow 147 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5903 Flow 1866 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55056 -Flow 1718 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5904 -Flow 577 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10001 -Flow 643 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10001 -Flow 535 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5906 -Flow 272 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10002 -Flow 733 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10003 -Flow 1029 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5907 -Flow 612 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5906 -Flow 307 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10002 -Flow 822 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10003 -Flow 1076 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5907 -Flow 626 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10004 -Flow 711 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10004 -Flow 1298 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5910 -Flow 1774 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5911 -Flow 1352 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5910 -Flow 1835 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5911 -Flow 421 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10009 -Flow 803 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10010 -Flow 445 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10009 -Flow 1803 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5915 -Flow 852 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10010 -Flow 1925 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10012 -Flow 1854 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5915 -Flow 1969 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10012 -Flow 1348 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3869 -Flow 1397 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3869 -Flow 1372 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3871 -Flow 1447 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3871 -Flow 769 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5922 -Flow 828 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5922 -Flow 1805 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5925 -Flow 1852 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5925 -Flow 798 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3878 -Flow 857 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3878 -Flow 1216 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10024 -Flow 89 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3880 -Flow 1536 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10025 -Flow 1282 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10024 -Flow 120 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3880 -Flow 1617 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10025 -Flow 728 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1839 -Flow 777 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1839 -Flow 269 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1840 -Flow 1430 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3889 -Flow 310 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1840 -Flow 1516 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3889 -Flow 1522 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5950 -Flow 1601 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5950 -Flow 1388 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7999 -Flow 1461 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7999 -Flow 1292 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5952 -Flow 427 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8000 -Flow 1358 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5952 -Flow 1344 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8001 -Flow 624 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3905 -Flow 480 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8000 -Flow 1401 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8001 -Flow 713 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3905 -Flow 633 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8002 -Flow 704 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8002 -Flow 500 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1862 -Flow 1176 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8007 -Flow 1936 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1863 -Flow 531 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1862 -Flow 169 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5959 -Flow 1231 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8007 -Flow 1986 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1863 -Flow 1142 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5960 -Flow 865 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1864 -Flow 205 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5959 -Flow 1336 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5961 -Flow 1205 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5960 -Flow 940 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1864 -Flow 1947 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5962 -Flow 1743 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3914 -Flow 1409 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5961 -Flow 1975 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5962 -Flow 1478 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8011 -Flow 1811 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3914 -Flow 343 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5963 -Flow 1571 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8011 -Flow 359 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5963 -Flow 300 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3918 -Flow 320 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3918 -Flow 1652 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3920 -Flow 1719 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3920 -Flow 717 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1875 -Flow 788 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1875 -Flow 519 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8021 -Flow 1789 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8022 -Flow 552 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8021 -Flow 1868 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8022 -Flow 1383 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8031 -Flow 1466 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8031 -Flow 513 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10082 -Flow 1776 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:63331 -Flow 942 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5987 -Flow 558 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10082 -Flow 1881 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:63331 -Flow 1013 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5987 -Flow 570 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5988 -Flow 897 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5989 -Flow 650 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5988 -Flow 958 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5989 -Flow 256 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3945 -Flow 839 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8042 -Flow 282 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3945 -Flow 908 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8042 -Flow 992 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1900 -Flow 1744 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:65389 -Flow 1055 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1900 -Flow 258 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8045 -Flow 1810 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:65389 -Flow 1064 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5998 -Flow 280 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8045 -Flow 1133 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5998 -Flow 628 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5999 -Flow 709 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5999 -Flow 50 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6000 -Flow 1481 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6001 -Flow 78 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6000 -Flow 1568 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6001 -Flow 1392 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6002 -Flow 1457 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6002 -Flow 1217 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6003 -Flow 1741 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6004 -Flow 1281 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6003 -Flow 1944 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6005 -Flow 1813 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6004 -Flow 1978 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6005 -Flow 1695 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6006 -Flow 1762 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6006 -Flow 1190 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6007 -Flow 1266 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6007 -Flow 1347 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6009 -Flow 1398 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6009 -Flow 847 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1914 -Flow 900 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1914 +Flow 871 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55555 +Flow 934 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55555 +Flow 579 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55600 +Flow 641 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55600 +Flow 1106 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:22939 +Flow 1149 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:22939 +Flow 1796 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:23502 +Flow 1861 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:23502 +Flow 1335 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:56737 +Flow 1643 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:56738 +Flow 1410 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:56737 +Flow 1728 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:56738 Flow 292 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:24444 Flow 328 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:24444 -Flow 955 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3971 -Flow 1000 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3971 -Flow 517 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6025 -Flow 554 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6025 -Flow 875 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12174 -Flow 930 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12174 -Flow 1442 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8081 -Flow 1504 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8081 -Flow 1518 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3986 -Flow 736 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8082 -Flow 1648 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8083 -Flow 1580 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3986 -Flow 819 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8082 -Flow 1896 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8084 -Flow 1723 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8083 -Flow 1956 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8084 -Flow 1147 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8085 -Flow 1200 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8085 -Flow 346 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8086 -Flow 1043 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8087 -Flow 397 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8086 -Flow 1218 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8088 -Flow 1112 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8087 -Flow 1280 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8088 -Flow 1094 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8089 -Flow 1161 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8089 -Flow 846 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8090 -Flow 901 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8090 -Flow 1474 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1947 -Flow 691 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3995 -Flow 1575 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1947 -Flow 756 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3995 -Flow 1890 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8093 -Flow 1962 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8093 -Flow 1692 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3998 -Flow 87 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14238 -Flow 1371 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:51103 -Flow 1765 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3998 -Flow 122 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14238 -Flow 1448 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:51103 -Flow 1842 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4001 -Flow 1919 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4001 -Flow 1484 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4002 -Flow 1565 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4002 -Flow 634 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8099 -Flow 105 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4003 -Flow 703 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8099 -Flow 501 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8100 -Flow 1290 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4004 -Flow 145 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4003 -Flow 1360 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4004 -Flow 530 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8100 -Flow 374 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4005 -Flow 410 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4005 -Flow 335 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4006 -Flow 367 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4006 -Flow 1781 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6059 -Flow 1876 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6059 -Flow 1164 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1971 -Flow 1250 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1972 -Flow 1243 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1971 -Flow 1310 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1972 -Flow 880 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1974 -Flow 925 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1974 -Flow 1892 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1984 -Flow 1960 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1984 -Flow 615 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10180 -Flow 682 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10180 -Flow 1645 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4045 -Flow 1726 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4045 Flow 1322 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:57294 -Flow 1319 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1998 Flow 1423 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:57294 -Flow 1378 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1998 -Flow 764 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1999 -Flow 263 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:40911 -Flow 833 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1999 -Flow 316 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:40911 -Flow 355 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2001 -Flow 388 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2001 -Flow 1185 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2003 -Flow 1381 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6100 -Flow 1271 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2003 -Flow 893 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2004 -Flow 1468 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6100 -Flow 1035 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6101 -Flow 962 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2004 -Flow 101 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2005 -Flow 1120 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6101 -Flow 1693 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2006 -Flow 149 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2005 -Flow 1764 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2006 -Flow 1432 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2007 -Flow 1822 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2008 -Flow 1514 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2007 -Flow 1884 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2008 -Flow 951 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2009 -Flow 1677 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2010 -Flow 1004 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2009 -Flow 582 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6106 -Flow 1750 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2010 -Flow 673 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6106 -Flow 515 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2013 -Flow 556 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2013 -Flow 1172 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6112 -Flow 1235 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6112 -Flow 340 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2020 -Flow 1376 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2021 -Flow 362 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2020 -Flow 1453 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2021 -Flow 741 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2022 -Flow 1540 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10215 -Flow 814 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2022 -Flow 1613 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10215 -Flow 766 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12265 -Flow 831 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12265 -Flow 1786 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6123 -Flow 1871 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6123 -Flow 53 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2030 -Flow 75 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2030 -Flow 1888 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2033 -Flow 1735 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6129 -Flow 1964 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2033 -Flow 1945 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2034 -Flow 1819 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6129 -Flow 1977 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2034 -Flow 1031 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2035 -Flow 1074 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2035 -Flow 916 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8180 -Flow 981 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8180 -Flow 746 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8181 -Flow 809 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8181 -Flow 86 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2038 -Flow 123 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2038 -Flow 1785 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2040 -Flow 1872 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2040 -Flow 1258 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2041 -Flow 1302 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2041 -Flow 1140 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2042 -Flow 1545 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2043 -Flow 1207 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2042 -Flow 1608 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2043 -Flow 1779 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2045 -Flow 1878 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2045 -Flow 350 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2046 +Flow 1387 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:24800 +Flow 1462 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:24800 +Flow 462 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:57797 +Flow 486 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:57797 +Flow 1337 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:58080 +Flow 1408 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:58080 +Flow 454 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:25734 +Flow 1686 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:25735 +Flow 494 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:25734 +Flow 1771 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:25735 +Flow 1594 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:26214 +Flow 1656 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:26214 +Flow 1253 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27000 +Flow 1307 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27000 +Flow 1927 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:60020 +Flow 1967 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:60020 +Flow 1439 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27352 +Flow 1801 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27353 +Flow 1507 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27352 +Flow 1856 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27353 +Flow 189 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27355 +Flow 379 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27356 +Flow 226 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27355 +Flow 405 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27356 +Flow 434 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:60443 +Flow 473 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:60443 +Flow 946 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27715 +Flow 1009 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27715 +Flow 948 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:28201 +Flow 1007 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:28201 +Flow 177 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:61532 +Flow 197 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:61532 +Flow 1390 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:61900 +Flow 1459 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:61900 +Flow 299 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:62078 +Flow 321 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:62078 +Flow 693 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30000 +Flow 754 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30000 +Flow 1776 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:63331 +Flow 1881 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:63331 Flow 208 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30718 -Flow 587 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2047 -Flow 393 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2046 Flow 248 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30718 -Flow 1935 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49152 -Flow 696 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8192 -Flow 668 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2047 -Flow 637 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2048 +Flow 1678 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30951 +Flow 1749 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30951 +Flow 985 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:31038 +Flow 1062 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:31038 +Flow 109 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:31337 +Flow 1189 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:64623 +Flow 1267 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:64623 +Flow 952 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:64680 +Flow 1003 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:64680 +Flow 96 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:65000 +Flow 113 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:65000 +Flow 565 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:65129 +Flow 655 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:65129 +Flow 1744 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:65389 +Flow 1810 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:65389 Flow 185 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32768 -Flow 1987 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49152 -Flow 1343 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49153 Flow 1225 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32769 -Flow 751 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8192 Flow 944 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1 -Flow 700 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2048 -Flow 542 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8193 Flow 230 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32768 -Flow 1402 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49153 Flow 1775 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32770 Flow 1300 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32769 -Flow 802 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49154 -Flow 1193 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8194 Flow 1011 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1 -Flow 605 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8193 -Flow 853 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49154 Flow 1834 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32770 -Flow 1887 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10243 Flow 1480 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32771 -Flow 1263 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8194 Flow 544 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3 -Flow 194 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49155 Flow 1569 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32771 -Flow 1965 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10243 Flow 1332 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32772 -Flow 793 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49156 Flow 841 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4 Flow 603 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3 -Flow 221 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49155 -Flow 1951 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49157 Flow 1413 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32772 Flow 1177 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32773 Flow 906 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4 -Flow 862 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49156 -Flow 1971 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49157 Flow 1230 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32773 -Flow 954 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49158 Flow 585 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32774 Flow 54 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6 -Flow 1627 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49159 -Flow 1001 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49158 Flow 1843 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32775 Flow 670 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32774 Flow 514 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7 Flow 74 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6 Flow 1918 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32775 -Flow 1848 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49160 -Flow 1714 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49159 -Flow 588 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8200 Flow 557 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7 Flow 509 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32776 -Flow 1913 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49160 -Flow 1489 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49161 Flow 1642 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32777 -Flow 667 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8200 Flow 562 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32776 Flow 371 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9 Flow 1729 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32777 -Flow 1560 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49161 Flow 413 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9 Flow 93 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32778 -Flow 767 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49163 Flow 792 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32779 Flow 116 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32778 Flow 863 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32779 -Flow 830 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49163 -Flow 1174 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6156 Flow 503 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32780 -Flow 727 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49165 Flow 528 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32780 Flow 1373 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13 -Flow 1233 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6156 Flow 276 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32781 -Flow 778 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49165 Flow 1446 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13 Flow 770 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32782 Flow 303 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32781 -Flow 1739 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49167 Flow 998 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32783 Flow 827 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32782 -Flow 380 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4111 -Flow 1815 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49167 Flow 1527 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32784 Flow 1049 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32783 -Flow 404 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4111 Flow 1596 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32784 -Flow 1833 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2065 Flow 436 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32785 Flow 289 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:17 -Flow 1908 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2065 Flow 471 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32785 Flow 331 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:17 Flow 1139 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19 -Flow 1647 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2068 Flow 1208 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19 -Flow 1724 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2068 -Flow 1443 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49175 -Flow 1503 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49175 -Flow 426 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49176 Flow 135 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:24 -Flow 481 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49176 Flow 157 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:24 Flow 293 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:26 Flow 327 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:26 -Flow 765 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4125 -Flow 832 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4125 -Flow 463 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4126 Flow 429 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30 -Flow 56 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8222 -Flow 485 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4126 Flow 478 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30 -Flow 72 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8222 Flow 132 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:32 -Flow 353 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4129 Flow 1640 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:33 Flow 160 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:32 Flow 1701 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:33 -Flow 390 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4129 Flow 1368 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:37 Flow 1451 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:37 Flow 694 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:42 Flow 753 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:42 -Flow 1017 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:45100 -Flow 1088 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:45100 Flow 1485 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49 Flow 1564 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49 -Flow 217 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2099 -Flow 844 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2100 -Flow 239 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2099 -Flow 903 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2100 -Flow 1931 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2103 -Flow 1991 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2103 -Flow 1636 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2105 -Flow 878 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12345 -Flow 1705 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2105 -Flow 927 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12345 -Flow 176 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2106 -Flow 730 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2107 -Flow 198 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2106 -Flow 775 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2107 -Flow 1628 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8254 -Flow 1713 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8254 -Flow 1486 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2111 -Flow 1563 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2111 Flow 1184 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:70 -Flow 1148 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2119 -Flow 1199 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2119 -Flow 595 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2121 -Flow 660 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2121 -Flow 572 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2126 Flow 1196 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:79 -Flow 648 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2126 Flow 1260 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:79 Flow 1365 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:81 Flow 1429 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:81 @@ -779,110 +158,42 @@ Flow 678 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:83 Flow 1824 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:85 Flow 856 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:84 Flow 1907 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:85 -Flow 1369 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2135 -Flow 1450 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2135 Flow 1040 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:89 Flow 1895 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:90 Flow 1115 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:89 Flow 1957 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:90 -Flow 177 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:61532 -Flow 197 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:61532 -Flow 1143 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2144 -Flow 1204 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2144 -Flow 1544 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8290 -Flow 1609 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8290 Flow 377 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:99 -Flow 124 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8291 -Flow 578 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8292 Flow 1588 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:100 Flow 407 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:99 -Flow 168 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8291 Flow 1662 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:100 -Flow 642 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8292 -Flow 918 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14441 -Flow 979 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14441 Flow 1248 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:106 -Flow 108 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14442 Flow 1312 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:106 -Flow 142 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14442 -Flow 254 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8300 Flow 763 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:109 -Flow 284 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8300 Flow 834 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:109 Flow 5 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:111 -Flow 1792 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2160 Flow 25 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:111 -Flow 1865 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2160 -Flow 465 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2161 Flow 12 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:113 -Flow 483 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2161 Flow 1593 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:119 Flow 1657 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:119 -Flow 1034 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2170 -Flow 1121 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2170 Flow 523 not-detected: tcp 172.16.0.8:36061 -> 64.13.134.52:113 Flow 723 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:125 Flow 782 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:125 -Flow 425 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4224 -Flow 441 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4224 -Flow 1286 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2179 -Flow 1364 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2179 -Flow 1327 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2191 -Flow 1418 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2191 Flow 1032 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:144 Flow 1123 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:144 Flow 1384 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:146 -Flow 1346 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4242 Flow 1465 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:146 -Flow 1399 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4242 -Flow 594 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2196 -Flow 661 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2196 -Flow 506 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2200 -Flow 525 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2200 Flow 1634 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:161 Flow 1707 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:161 Flow 504 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:163 Flow 527 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:163 -Flow 49 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2222 -Flow 79 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2222 -Flow 917 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4279 -Flow 980 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4279 -Flow 1669 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8383 -Flow 1733 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8383 Flow 4 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:199 Flow 26 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:199 -Flow 461 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6346 -Flow 1851 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2251 -Flow 487 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6346 -Flow 1910 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2251 -Flow 435 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8400 -Flow 472 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8400 -Flow 1096 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8402 -Flow 1159 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8402 Flow 1030 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:211 Flow 1075 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:211 Flow 564 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:212 -Flow 431 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2260 Flow 656 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:212 -Flow 476 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2260 Flow 1192 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:222 Flow 1264 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:222 -Flow 1387 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:24800 -Flow 1699 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4321 -Flow 1462 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:24800 -Flow 1758 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4321 -Flow 1678 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30951 -Flow 1749 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30951 -Flow 536 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2288 -Flow 611 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2288 -Flow 266 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6389 -Flow 313 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6389 -Flow 1524 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49400 -Flow 1599 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49400 -Flow 1519 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8443 -Flow 1579 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8443 -Flow 921 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2301 -Flow 976 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2301 Flow 419 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:254 Flow 1101 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:255 Flow 447 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:254 @@ -890,280 +201,93 @@ Flow 1154 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:255 Flow 37 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:256 Flow 63 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:256 Flow 1886 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:259 -Flow 871 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55555 Flow 1966 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:259 -Flow 934 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55555 Flow 1487 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:264 Flow 1562 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:264 -Flow 1543 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2323 -Flow 1610 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2323 Flow 270 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:280 Flow 309 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:280 -Flow 695 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:51493 -Flow 752 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:51493 Flow 747 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:301 Flow 808 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:301 -Flow 579 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:55600 -Flow 641 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:55600 Flow 1939 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:306 Flow 1983 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:306 -Flow 1470 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8500 -Flow 1531 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8500 Flow 1898 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:311 Flow 1954 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:311 -Flow 1795 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2366 -Flow 985 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:31038 -Flow 1862 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2366 -Flow 1062 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:31038 -Flow 546 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10566 -Flow 601 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10566 -Flow 1016 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2381 -Flow 1089 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2381 -Flow 295 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2382 -Flow 740 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2383 -Flow 325 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2382 -Flow 815 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2383 Flow 1497 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:340 Flow 1552 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:340 -Flow 417 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2393 -Flow 1291 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2394 -Flow 449 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2393 -Flow 1359 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2394 -Flow 991 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4443 -Flow 1595 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20828 -Flow 1195 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4444 -Flow 1056 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4443 -Flow 1655 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20828 -Flow 1261 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4444 -Flow 1015 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4445 -Flow 1145 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4446 -Flow 1090 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4445 -Flow 1202 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4446 -Flow 1038 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2399 -Flow 1117 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2399 -Flow 1937 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2401 -Flow 617 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4449 -Flow 1985 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2401 -Flow 680 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4449 -Flow 1745 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6502 -Flow 1809 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6502 -Flow 742 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6510 Flow 726 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:366 -Flow 813 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6510 Flow 779 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:366 -Flow 1253 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27000 -Flow 987 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10616 -Flow 1307 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27000 -Flow 1060 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10616 -Flow 731 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10617 -Flow 774 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10617 -Flow 46 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10621 -Flow 82 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10621 -Flow 131 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10626 -Flow 161 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10626 -Flow 1194 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10628 -Flow 1262 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10628 -Flow 44 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10629 -Flow 84 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10629 -Flow 210 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6543 -Flow 246 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6543 -Flow 638 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6547 -Flow 699 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6547 Flow 1105 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:406 Flow 1385 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:407 Flow 1150 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:406 Flow 1464 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:407 -Flow 1168 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8600 -Flow 1239 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8600 -Flow 1106 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:22939 -Flow 1149 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:22939 Flow 1318 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:416 Flow 1479 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:417 Flow 1379 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:416 Flow 1570 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:417 -Flow 1431 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6565 -Flow 1515 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6565 -Flow 1334 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6566 -Flow 1492 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6567 -Flow 1411 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6566 -Flow 1557 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6567 Flow 170 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:425 Flow 204 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:425 -Flow 191 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6580 -Flow 224 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6580 -Flow 1435 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2492 Flow 1672 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:444 Flow 1755 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:444 -Flow 1511 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2492 -Flow 1491 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2500 -Flow 1558 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2500 -Flow 462 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:57797 -Flow 898 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4550 -Flow 486 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:57797 -Flow 957 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4550 -Flow 216 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8649 Flow 1294 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:458 -Flow 240 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8649 Flow 1356 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:458 -Flow 452 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8651 -Flow 1390 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:61900 -Flow 1100 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8652 -Flow 496 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8651 -Flow 1459 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:61900 -Flow 1155 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8652 -Flow 1793 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8654 -Flow 1864 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8654 Flow 516 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:464 Flow 555 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:464 -Flow 541 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4567 -Flow 606 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4567 -Flow 349 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2522 -Flow 394 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2522 -Flow 267 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2525 -Flow 312 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2525 Flow 837 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:481 Flow 910 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:481 Flow 178 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:497 Flow 196 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:497 -Flow 1826 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6646 -Flow 1905 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6646 -Flow 1367 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2557 -Flow 715 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8701 -Flow 1427 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2557 -Flow 790 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8701 Flow 1950 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:512 Flow 1972 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:512 Flow 1341 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:513 Flow 1404 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:513 Flow 1623 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:515 Flow 1682 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:515 -Flow 1899 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6666 -Flow 1953 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6666 -Flow 1675 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6667 -Flow 1752 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6667 -Flow 1167 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6668 Flow 1135 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:524 -Flow 1240 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6668 Flow 1212 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:524 -Flow 180 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6669 -Flow 235 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6669 -Flow 720 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10778 -Flow 785 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10778 Flow 1323 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:541 Flow 1422 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:541 Flow 1187 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:543 Flow 1670 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:544 Flow 1269 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:543 Flow 1732 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:544 -Flow 956 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6689 Flow 892 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:545 -Flow 999 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6689 Flow 963 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:545 -Flow 1541 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6692 -Flow 1612 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6692 -Flow 1219 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:41511 -Flow 1279 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:41511 -Flow 895 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2601 -Flow 1245 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2602 -Flow 960 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2601 -Flow 1315 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2602 -Flow 290 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6699 Flow 1624 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:555 -Flow 1638 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:18988 Flow 1717 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:555 -Flow 330 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6699 -Flow 1703 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:18988 -Flow 1840 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2607 -Flow 1921 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2607 -Flow 1293 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2608 -Flow 1357 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2608 Flow 1894 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:563 Flow 1958 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:563 -Flow 459 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4662 -Flow 489 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4662 Flow 1102 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:33354 Flow 1153 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:33354 -Flow 1622 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2638 -Flow 1683 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2638 Flow 1391 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:593 Flow 1458 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:593 -Flow 1933 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8800 -Flow 1019 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16992 -Flow 1989 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8800 -Flow 1746 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16993 -Flow 1086 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16992 -Flow 1808 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16993 Flow 1537 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:616 Flow 1616 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:616 Flow 773 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:617 -Flow 109 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:31337 Flow 824 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:617 Flow 1832 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:625 Flow 1909 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:625 -Flow 1927 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:60020 -Flow 1967 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:60020 Flow 1494 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:631 Flow 1555 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:631 -Flow 627 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6779 Flow 1583 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:636 -Flow 710 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6779 Flow 1667 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:636 -Flow 299 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:62078 -Flow 321 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:62078 -Flow 259 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6788 -Flow 279 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6788 -Flow 1499 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6792 Flow 1495 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:648 Flow 1554 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:648 -Flow 1550 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6792 -Flow 99 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2701 -Flow 1048 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2702 -Flow 151 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2701 -Flow 1107 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2702 -Flow 1436 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2710 -Flow 1510 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2710 -Flow 1138 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15000 -Flow 1209 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15000 -Flow 877 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15002 Flow 296 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:666 -Flow 1183 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15003 -Flow 928 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15002 Flow 1024 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:667 Flow 324 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:666 -Flow 1272 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15003 Flow 1639 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:668 Flow 1081 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:667 -Flow 133 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15004 -Flow 302 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19101 Flow 1702 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:668 -Flow 732 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2717 -Flow 159 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15004 -Flow 1942 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2718 -Flow 823 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2717 -Flow 318 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19101 -Flow 1980 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2718 -Flow 1897 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2725 -Flow 1955 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2725 -Flow 1041 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8873 -Flow 1114 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8873 Flow 57 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:683 -Flow 512 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:35500 Flow 71 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:683 -Flow 559 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:35500 Flow 1846 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:687 Flow 1915 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:687 Flow 1297 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:691 Flow 1353 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:691 -Flow 262 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6839 -Flow 317 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6839 -Flow 41 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8888 -Flow 60 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8888 Flow 274 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:700 Flow 305 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:700 Flow 950 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:705 Flow 1005 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:705 -Flow 1214 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8899 -Flow 1284 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8899 Flow 1224 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:711 Flow 1301 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:711 Flow 1170 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:714 @@ -1174,30 +298,8 @@ Flow 1342 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:722 Flow 1403 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:722 Flow 457 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:726 Flow 491 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:726 -Flow 1439 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27352 -Flow 1801 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27353 -Flow 1507 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27352 -Flow 1856 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27353 -Flow 189 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27355 -Flow 379 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27356 -Flow 226 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27355 -Flow 405 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27356 -Flow 1337 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:58080 -Flow 1408 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:58080 -Flow 884 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6881 -Flow 971 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6881 Flow 631 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:749 Flow 706 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:749 -Flow 460 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2800 -Flow 92 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4848 -Flow 488 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2800 -Flow 117 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4848 -Flow 1685 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6901 -Flow 1772 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6901 -Flow 1370 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2809 -Flow 1449 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2809 -Flow 352 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2811 -Flow 391 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2811 Flow 218 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:765 Flow 238 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:765 Flow 1649 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:777 @@ -1206,196 +308,36 @@ Flow 1500 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:783 Flow 1549 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:783 Flow 1654 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:787 Flow 1730 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:787 -Flow 1502 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:54045 -Flow 1578 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:54045 Flow 1036 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:800 Flow 1119 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:800 Flow 301 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:801 -Flow 1037 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8994 Flow 319 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:801 -Flow 1118 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8994 -Flow 692 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4900 -Flow 755 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4900 -Flow 1635 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9000 Flow 209 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:808 -Flow 1706 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9000 -Flow 1182 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9001 Flow 247 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:808 -Flow 1273 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9001 -Flow 1063 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9002 -Flow 1134 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9002 -Flow 592 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9003 -Flow 663 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9003 -Flow 567 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9009 -Flow 653 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9009 -Flow 219 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9010 -Flow 1783 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9011 -Flow 237 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9010 -Flow 1874 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9011 -Flow 179 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2869 -Flow 195 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2869 -Flow 1687 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6969 -Flow 1770 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6969 -Flow 1526 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2875 -Flow 1597 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2875 Flow 100 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:843 Flow 150 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:843 -Flow 253 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49999 -Flow 1734 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50000 -Flow 1477 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9040 -Flow 285 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49999 -Flow 1820 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50000 -Flow 1572 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9040 -Flow 1068 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50001 -Flow 1690 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50002 -Flow 1129 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50001 -Flow 1767 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50002 -Flow 1632 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50003 -Flow 1340 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19283 -Flow 1709 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50003 -Flow 1405 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19283 -Flow 1794 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50006 -Flow 1863 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50006 -Flow 616 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7001 -Flow 947 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7002 -Flow 681 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7001 -Flow 623 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9050 -Flow 1008 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7002 -Flow 674 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9050 -Flow 1440 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7004 -Flow 1506 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7004 -Flow 416 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2909 -Flow 1680 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2910 -Flow 450 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2909 -Flow 1802 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7007 -Flow 1757 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2910 -Flow 1855 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7007 -Flow 876 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:11110 -Flow 929 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:11110 -Flow 498 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:11111 -Flow 1837 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2920 -Flow 533 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:11111 -Flow 1924 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2920 -Flow 1018 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7019 -Flow 1087 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7019 -Flow 220 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9071 Flow 1625 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:880 -Flow 236 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9071 Flow 1716 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:880 -Flow 1255 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7025 -Flow 1305 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7025 -Flow 686 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19315 -Flow 761 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19315 -Flow 1025 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9080 Flow 589 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:888 -Flow 1080 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9080 -Flow 994 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9081 Flow 666 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:888 -Flow 1053 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9081 -Flow 1097 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9090 Flow 883 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:898 -Flow 1158 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9090 Flow 972 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:898 -Flow 574 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9091 Flow 1591 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:900 -Flow 646 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9091 Flow 1659 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:900 Flow 866 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:901 -Flow 1928 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4998 Flow 1092 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:902 Flow 939 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:901 -Flow 1994 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4998 Flow 1163 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:902 -Flow 1169 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5000 -Flow 1238 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5000 -Flow 1929 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5002 -Flow 1993 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5002 -Flow 1798 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5003 -Flow 1644 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9099 -Flow 1727 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9099 -Flow 1859 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5003 -Flow 1523 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9100 -Flow 1437 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5004 -Flow 1600 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9100 -Flow 1509 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5004 -Flow 630 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9101 -Flow 707 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9101 -Flow 138 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9102 Flow 1780 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:911 -Flow 1299 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9103 -Flow 154 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9102 Flow 1877 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:911 -Flow 1351 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9103 Flow 456 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:912 -Flow 1542 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5009 Flow 492 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:912 -Flow 1611 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5009 -Flow 1389 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19350 -Flow 437 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9110 -Flow 1460 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19350 -Flow 1671 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9111 -Flow 840 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2967 -Flow 470 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9110 -Flow 1731 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9111 -Flow 907 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2967 -Flow 415 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2968 -Flow 451 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2968 -Flow 507 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7070 -Flow 524 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7070 -Flow 1047 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5030 -Flow 1108 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5030 -Flow 212 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5033 -Flow 244 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5033 -Flow 586 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2998 -Flow 669 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2998 -Flow 433 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3000 -Flow 474 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3000 -Flow 192 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3001 -Flow 1179 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5050 -Flow 223 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3001 -Flow 1228 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5050 -Flow 1688 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3003 -Flow 739 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5051 -Flow 1769 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3003 -Flow 816 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5051 -Flow 613 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7100 -Flow 1696 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3005 -Flow 684 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7100 -Flow 1761 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3005 -Flow 1584 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5054 -Flow 806 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3006 -Flow 1676 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7103 -Flow 1666 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5054 -Flow 869 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3007 -Flow 849 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3006 -Flow 1751 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7103 -Flow 936 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3007 -Flow 1042 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7106 -Flow 1689 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3011 -Flow 1113 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7106 -Flow 1768 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3011 -Flow 1849 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3013 -Flow 1912 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3013 -Flow 273 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3017 -Flow 306 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3017 -Flow 1796 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:23502 -Flow 1861 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:23502 -Flow 341 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:48080 -Flow 361 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:48080 Flow 867 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:981 Flow 938 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:981 -Flow 635 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3030 -Flow 1938 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3031 -Flow 702 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3030 -Flow 1984 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3031 -Flow 339 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5080 -Flow 363 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5080 Flow 914 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:987 Flow 983 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:987 Flow 47 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:990 -Flow 1287 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5087 Flow 81 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:990 -Flow 1363 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5087 Flow 1099 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:992 Flow 1156 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:992 Flow 522 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:999 @@ -1405,56 +347,34 @@ Flow 1512 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1000 Flow 845 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1001 Flow 902 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1001 Flow 894 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1002 -Flow 58 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3050 Flow 961 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1002 -Flow 70 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3050 -Flow 1136 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5100 -Flow 298 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3052 -Flow 1211 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5100 -Flow 322 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3052 -Flow 136 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5101 -Flow 1026 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5102 -Flow 156 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5101 Flow 1827 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1007 -Flow 1079 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5102 Flow 1904 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1007 -Flow 102 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9200 Flow 576 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1009 -Flow 148 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9200 Flow 1095 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1010 Flow 644 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1009 Flow 1160 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1010 Flow 1070 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1011 Flow 1127 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1011 -Flow 1338 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9207 -Flow 1407 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9207 Flow 1926 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1021 Flow 1968 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1021 Flow 1529 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1022 Flow 1604 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1022 Flow 1586 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1023 -Flow 211 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3071 -Flow 887 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5120 Flow 1664 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1023 -Flow 245 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3071 Flow 130 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1024 -Flow 968 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5120 Flow 162 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1024 Flow 6 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1025 Flow 1471 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1026 Flow 24 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1025 Flow 1530 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1026 Flow 428 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1027 -Flow 548 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9220 Flow 1590 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1028 Flow 479 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1027 -Flow 599 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9220 Flow 1660 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1028 Flow 864 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1029 -Flow 126 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3077 Flow 1186 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1030 Flow 941 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1029 -Flow 166 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3077 Flow 1270 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1030 Flow 636 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1031 Flow 1198 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1032 @@ -1497,10 +417,8 @@ Flow 1990 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1049 Flow 1103 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1050 Flow 1152 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1050 Flow 891 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1051 -Flow 434 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:60443 Flow 964 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1051 Flow 690 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1052 -Flow 473 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:60443 Flow 757 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1052 Flow 584 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1053 Flow 1520 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1054 @@ -1508,14 +426,10 @@ Flow 671 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1053 Flow 1603 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1054 Flow 1331 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1055 Flow 1414 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1055 -Flow 128 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7200 Flow 43 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1056 -Flow 583 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7201 -Flow 164 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7200 Flow 1742 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1057 Flow 85 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1056 Flow 1812 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1057 -Flow 672 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7201 Flow 569 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1058 Flow 988 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1059 Flow 651 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1058 @@ -1560,9 +474,7 @@ Flow 748 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1078 Flow 807 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1078 Flow 771 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1079 Flow 826 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1079 -Flow 618 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:54328 Flow 1490 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1081 -Flow 679 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:54328 Flow 1559 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1081 Flow 842 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1082 Flow 905 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1082 @@ -1582,39 +494,29 @@ Flow 550 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1088 Flow 1748 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1089 Flow 1629 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1090 Flow 1712 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1090 -Flow 1521 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:21571 Flow 1137 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1091 -Flow 946 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:27715 -Flow 1602 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:21571 Flow 1930 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1092 Flow 1210 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1091 -Flow 1009 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:27715 Flow 1992 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1092 Flow 896 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1093 Flow 1646 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1094 Flow 959 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1093 -Flow 260 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5190 Flow 1725 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1094 -Flow 278 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5190 Flow 213 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1095 Flow 598 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1096 Flow 243 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1095 Flow 657 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1096 Flow 422 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1097 -Flow 1934 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9290 Flow 1257 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1098 Flow 444 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1097 -Flow 1988 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9290 Flow 1303 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1098 Flow 1166 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1100 Flow 1241 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1100 Flow 1533 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1102 Flow 1620 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1102 Flow 1941 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1104 -Flow 438 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5200 Flow 1981 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1104 Flow 1178 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1105 -Flow 469 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5200 Flow 1229 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1105 Flow 1144 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1106 Flow 1582 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1107 @@ -1634,11 +536,7 @@ Flow 1395 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1114 Flow 1454 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1114 Flow 1071 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1117 Flow 1126 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1117 -Flow 288 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5214 -Flow 332 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5214 -Flow 805 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3168 Flow 1215 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1121 -Flow 850 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3168 Flow 1283 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1121 Flow 1223 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1122 Flow 1275 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1122 @@ -1646,26 +544,16 @@ Flow 265 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1123 Flow 1252 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1124 Flow 314 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1123 Flow 1308 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1124 -Flow 338 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5221 Flow 1339 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1126 -Flow 1165 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5222 -Flow 364 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5221 Flow 1406 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1126 -Flow 1242 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5222 -Flow 1850 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5225 -Flow 1911 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5225 Flow 1525 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1130 -Flow 1476 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5226 Flow 1598 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1130 -Flow 1573 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5226 Flow 271 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1131 Flow 106 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:33899 Flow 1188 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1132 Flow 308 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1131 Flow 144 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:33899 Flow 1268 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1132 -Flow 1189 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:64623 -Flow 1267 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:64623 Flow 993 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1137 Flow 1141 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1138 Flow 1054 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1137 @@ -1676,9 +564,7 @@ Flow 1326 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1145 Flow 1419 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1145 Flow 1501 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1147 Flow 1548 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1147 -Flow 1173 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50300 Flow 725 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1148 -Flow 1234 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50300 Flow 1747 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1149 Flow 780 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1148 Flow 1807 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1149 @@ -1688,13 +574,7 @@ Flow 442 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1151 Flow 1857 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1152 Flow 345 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1154 Flow 398 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1154 -Flow 454 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:25734 -Flow 1686 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:25735 -Flow 494 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:25734 -Flow 1771 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:25735 -Flow 1673 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3211 Flow 1246 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1163 -Flow 1754 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3211 Flow 1314 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1163 Flow 882 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1164 Flow 973 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1164 @@ -1702,47 +582,29 @@ Flow 737 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1165 Flow 818 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1165 Flow 373 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1166 Flow 411 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1166 -Flow 251 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44176 -Flow 174 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13456 -Flow 287 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44176 Flow 547 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1169 -Flow 200 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13456 Flow 600 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1169 -Flow 1946 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5269 -Flow 1366 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3221 -Flow 1976 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5269 -Flow 1428 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3221 Flow 1020 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1174 Flow 1180 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1175 Flow 1085 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1174 Flow 1227 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1175 Flow 252 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1183 -Flow 835 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5280 Flow 286 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1183 -Flow 912 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5280 Flow 566 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1185 Flow 949 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1186 Flow 654 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1185 Flow 1006 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1186 Flow 127 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1187 Flow 165 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1187 -Flow 952 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:64680 Flow 874 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1192 -Flow 1003 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:64680 Flow 931 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1192 Flow 1782 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1198 Flow 1875 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1198 Flow 718 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1199 Flow 787 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1199 Flow 591 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1201 -Flow 1220 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5298 Flow 664 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1201 -Flow 1278 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5298 -Flow 1181 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3260 -Flow 1952 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3261 Flow 1637 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1213 -Flow 1226 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3260 -Flow 1970 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3261 Flow 1704 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1213 Flow 573 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1216 Flow 1067 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1217 @@ -1750,105 +612,1243 @@ Flow 647 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1216 Flow 1130 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1217 Flow 685 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1218 Flow 762 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1218 -Flow 1948 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3268 -Flow 1974 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3268 -Flow 1433 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3269 -Flow 1513 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3269 -Flow 464 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9415 -Flow 484 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9415 Flow 52 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1233 Flow 1804 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1234 Flow 76 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1233 Flow 1853 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1234 -Flow 1325 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3283 Flow 1823 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1236 -Flow 1420 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3283 Flow 1883 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1236 -Flow 1806 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50389 -Flow 1882 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50389 Flow 297 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1244 Flow 323 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1244 Flow 110 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1247 Flow 568 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1248 Flow 141 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1247 Flow 652 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1248 -Flow 505 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3301 -Flow 526 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3301 -Flow 1698 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7402 -Flow 1759 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7402 Flow 510 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1259 Flow 561 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1259 -Flow 1681 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5357 -Flow 1756 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5357 Flow 697 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1271 Flow 1213 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1272 Flow 750 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1271 Flow 1285 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1272 -Flow 1375 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3322 -Flow 1444 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3322 -Flow 1386 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3323 -Flow 1630 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3324 -Flow 1463 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3323 -Flow 1711 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3324 -Flow 1069 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3325 Flow 571 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1277 -Flow 1128 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3325 Flow 649 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1277 -Flow 1473 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:40193 -Flow 1576 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:40193 -Flow 1377 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3333 -Flow 1452 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3333 Flow 1321 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1287 Flow 1424 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1287 -Flow 1498 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7435 -Flow 1551 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7435 -Flow 797 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9485 -Flow 858 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9485 Flow 137 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1296 Flow 155 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1296 -Flow 1438 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7443 -Flow 1508 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7443 Flow 98 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1300 Flow 632 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1301 Flow 152 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1300 Flow 705 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1301 -Flow 1736 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3351 -Flow 1818 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3351 -Flow 171 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9500 -Flow 738 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5405 Flow 620 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1309 -Flow 203 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9500 -Flow 943 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9502 -Flow 817 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5405 Flow 1393 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1310 Flow 677 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1309 Flow 1456 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1310 -Flow 1065 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9503 -Flow 1012 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9502 Flow 111 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1311 -Flow 1132 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9503 Flow 140 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1311 -Flow 48 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5414 +Flow 543 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1322 +Flow 604 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1322 +Flow 372 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1328 +Flow 412 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1328 +Flow 1585 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1334 +Flow 1665 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1334 +Flow 55 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1417 +Flow 73 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1417 +Flow 997 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1443 +Flow 1050 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1443 +Flow 575 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1455 +Flow 645 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1455 +Flow 432 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1461 +Flow 475 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1461 +Flow 1488 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1500 +Flow 1561 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1500 +Flow 1244 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1501 +Flow 1316 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1501 +Flow 1482 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1503 +Flow 1567 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1503 +Flow 344 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1524 +Flow 399 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1524 +Flow 1072 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1533 +Flow 1125 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1533 +Flow 1528 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1556 +Flow 1605 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1556 +Flow 1784 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1580 +Flow 1873 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1580 +Flow 190 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1583 +Flow 225 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1583 +Flow 95 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1594 +Flow 114 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1594 +Flow 873 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1600 +Flow 932 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1600 +Flow 186 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1641 +Flow 229 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1641 +Flow 724 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1658 +Flow 781 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1658 +Flow 384 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1666 +Flow 400 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1666 +Flow 51 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1687 +Flow 440 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1688 +Flow 77 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1687 +Flow 467 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1688 +Flow 1296 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1700 +Flow 1354 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1700 +Flow 1221 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1717 +Flow 1277 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1717 +Flow 721 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1718 +Flow 784 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1718 +Flow 719 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1721 +Flow 786 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1721 +Flow 30 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1723 +Flow 69 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1723 +Flow 1626 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1755 +Flow 1715 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1755 +Flow 545 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1761 +Flow 602 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1761 +Flow 1104 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1782 +Flow 1151 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1782 +Flow 1014 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1783 +Flow 1091 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1783 +Flow 1841 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1801 +Flow 1920 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1801 +Flow 885 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:34571 +Flow 970 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:34571 +Flow 590 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:34572 +Flow 1046 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:34573 +Flow 665 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:34572 +Flow 453 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1805 +Flow 1109 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:34573 +Flow 495 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1805 +Flow 728 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1839 +Flow 777 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1839 +Flow 269 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1840 +Flow 310 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1840 +Flow 500 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1862 +Flow 1936 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1863 +Flow 531 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1862 +Flow 1986 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1863 +Flow 865 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1864 +Flow 940 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1864 +Flow 717 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1875 +Flow 788 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1875 +Flow 992 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1900 +Flow 1055 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1900 +Flow 847 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1914 +Flow 900 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1914 +Flow 1474 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1947 +Flow 1575 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1947 +Flow 1164 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1971 +Flow 1250 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1972 +Flow 1243 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1971 +Flow 1310 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1972 +Flow 880 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1974 +Flow 925 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1974 +Flow 1892 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1984 +Flow 1960 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1984 +Flow 1319 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1998 +Flow 1378 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1998 +Flow 764 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1999 +Flow 833 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1999 +Flow 355 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2001 +Flow 388 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2001 +Flow 1185 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2003 +Flow 1271 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2003 +Flow 893 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2004 +Flow 962 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2004 +Flow 101 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2005 +Flow 1693 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2006 +Flow 149 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2005 +Flow 1764 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2006 +Flow 1432 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2007 +Flow 1822 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2008 +Flow 1514 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2007 +Flow 1884 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2008 +Flow 951 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2009 +Flow 1677 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2010 +Flow 1004 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2009 +Flow 1750 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2010 +Flow 515 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2013 +Flow 556 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2013 +Flow 340 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2020 +Flow 1376 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2021 +Flow 362 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2020 +Flow 1453 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2021 +Flow 741 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2022 +Flow 814 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2022 +Flow 53 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2030 +Flow 75 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2030 +Flow 1888 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2033 +Flow 1964 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2033 +Flow 1945 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2034 +Flow 1977 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2034 +Flow 1031 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2035 +Flow 1074 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2035 +Flow 86 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2038 +Flow 123 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2038 +Flow 1785 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2040 +Flow 1872 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2040 +Flow 1258 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2041 +Flow 1302 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2041 +Flow 1140 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2042 +Flow 1545 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2043 +Flow 1207 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2042 +Flow 1608 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2043 +Flow 1779 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2045 +Flow 1878 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2045 +Flow 350 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2046 +Flow 587 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2047 +Flow 393 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2046 +Flow 668 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2047 +Flow 637 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2048 +Flow 700 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2048 +Flow 1833 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2065 +Flow 1908 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2065 +Flow 1647 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2068 +Flow 1724 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2068 +Flow 217 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2099 +Flow 844 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2100 +Flow 239 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2099 +Flow 903 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2100 +Flow 1931 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2103 +Flow 1991 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2103 +Flow 1636 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2105 +Flow 1705 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2105 +Flow 176 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2106 +Flow 730 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2107 +Flow 198 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2106 +Flow 775 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2107 +Flow 1486 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2111 +Flow 1563 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2111 +Flow 1148 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2119 +Flow 1199 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2119 +Flow 595 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2121 +Flow 660 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2121 +Flow 572 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2126 +Flow 648 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2126 +Flow 1369 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2135 +Flow 1450 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2135 +Flow 1143 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2144 +Flow 1204 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2144 +Flow 1792 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2160 +Flow 1865 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2160 +Flow 465 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2161 +Flow 483 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2161 +Flow 1034 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2170 +Flow 1121 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2170 +Flow 1286 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2179 +Flow 1364 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2179 +Flow 1327 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2191 +Flow 1418 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2191 +Flow 594 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2196 +Flow 661 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2196 +Flow 506 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2200 +Flow 525 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2200 +Flow 49 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2222 +Flow 79 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2222 +Flow 1851 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2251 +Flow 1910 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2251 +Flow 431 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2260 +Flow 476 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2260 +Flow 536 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2288 +Flow 611 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2288 +Flow 921 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2301 +Flow 976 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2301 +Flow 1543 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2323 +Flow 1610 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2323 +Flow 1795 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2366 +Flow 1862 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2366 +Flow 1016 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2381 +Flow 1089 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2381 +Flow 295 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2382 +Flow 740 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2383 +Flow 325 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2382 +Flow 815 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2383 +Flow 417 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2393 +Flow 1291 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2394 +Flow 449 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2393 +Flow 1359 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2394 +Flow 1038 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2399 +Flow 1117 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2399 +Flow 1937 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2401 +Flow 1985 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2401 +Flow 1435 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2492 +Flow 1511 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2492 +Flow 1491 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2500 +Flow 1558 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2500 +Flow 349 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2522 +Flow 394 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2522 +Flow 267 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2525 +Flow 312 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2525 +Flow 1367 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2557 +Flow 1427 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2557 +Flow 895 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2601 +Flow 1245 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2602 +Flow 960 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2601 +Flow 1315 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2602 +Flow 1840 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2607 +Flow 1921 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2607 +Flow 1293 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2608 +Flow 1357 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2608 +Flow 1622 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2638 +Flow 1683 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2638 +Flow 99 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2701 +Flow 1048 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2702 +Flow 151 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2701 +Flow 1107 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2702 +Flow 1436 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2710 +Flow 1510 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2710 +Flow 732 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2717 +Flow 1942 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2718 +Flow 823 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2717 +Flow 1980 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2718 +Flow 1897 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2725 +Flow 1955 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2725 +Flow 512 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:35500 +Flow 559 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:35500 +Flow 460 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2800 +Flow 488 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2800 +Flow 1370 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2809 +Flow 1449 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2809 +Flow 352 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2811 +Flow 391 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2811 +Flow 179 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2869 +Flow 195 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2869 +Flow 1526 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2875 +Flow 1597 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2875 +Flow 416 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2909 +Flow 1680 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2910 +Flow 450 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2909 +Flow 1757 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2910 +Flow 1837 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2920 +Flow 1924 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2920 +Flow 840 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2967 +Flow 907 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2967 +Flow 415 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2968 +Flow 451 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2968 +Flow 586 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:2998 +Flow 669 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:2998 +Flow 433 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3000 +Flow 474 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3000 +Flow 192 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3001 +Flow 223 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3001 +Flow 1688 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3003 +Flow 1769 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3003 +Flow 1696 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3005 +Flow 1761 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3005 +Flow 806 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3006 +Flow 869 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3007 +Flow 849 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3006 +Flow 936 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3007 +Flow 1689 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3011 +Flow 1768 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3011 +Flow 1849 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3013 +Flow 1912 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3013 +Flow 273 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3017 +Flow 306 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3017 +Flow 635 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3030 +Flow 1938 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3031 +Flow 702 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3030 +Flow 1984 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3031 +Flow 58 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3050 +Flow 70 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3050 +Flow 298 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3052 +Flow 322 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3052 +Flow 211 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3071 +Flow 245 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3071 +Flow 126 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3077 +Flow 166 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3077 +Flow 805 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3168 +Flow 850 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3168 +Flow 1673 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3211 +Flow 1754 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3211 +Flow 1366 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3221 +Flow 1428 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3221 +Flow 1181 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3260 +Flow 1952 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3261 +Flow 1226 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3260 +Flow 1970 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3261 +Flow 1948 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3268 +Flow 1974 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3268 +Flow 1433 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3269 +Flow 1513 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3269 +Flow 1325 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3283 +Flow 1420 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3283 +Flow 505 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3301 +Flow 526 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3301 +Flow 1375 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3322 +Flow 1444 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3322 +Flow 1386 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3323 +Flow 1630 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3324 +Flow 1463 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3323 +Flow 1711 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3324 +Flow 1069 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3325 +Flow 1128 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3325 +Flow 1377 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3333 +Flow 1452 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3333 +Flow 1736 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3351 +Flow 1818 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3351 Flow 593 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3367 -Flow 80 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5414 Flow 662 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3367 Flow 294 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3369 Flow 1345 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3370 -Flow 543 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1322 Flow 326 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3369 Flow 1535 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3371 Flow 1400 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3370 -Flow 604 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1322 Flow 1845 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3372 Flow 1618 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3371 -Flow 173 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15660 Flow 1916 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3372 -Flow 201 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15660 -Flow 693 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:30000 -Flow 372 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1328 -Flow 754 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:30000 -Flow 412 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1328 -Flow 1585 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:1334 -Flow 1665 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:1334 +Flow 716 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3390 +Flow 789 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3390 +Flow 1073 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3404 +Flow 1124 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3404 +Flow 351 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3476 +Flow 392 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3476 +Flow 336 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3493 +Flow 366 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3493 +Flow 520 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3517 +Flow 551 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3517 +Flow 1098 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3527 +Flow 1157 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3527 +Flow 688 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3546 +Flow 759 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3546 +Flow 1256 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3551 +Flow 1304 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3551 +Flow 1039 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3580 +Flow 1116 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3580 +Flow 890 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3659 +Flow 965 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3659 +Flow 1838 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3689 +Flow 1923 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3689 +Flow 1093 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3690 +Flow 1162 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3690 +Flow 1589 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3703 +Flow 1661 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3703 +Flow 337 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3737 +Flow 365 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3737 +Flow 872 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3766 +Flow 933 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3766 +Flow 420 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3784 +Flow 446 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3784 +Flow 1251 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3800 +Flow 1309 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3800 +Flow 800 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3801 +Flow 855 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3801 +Flow 358 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3809 +Flow 385 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3809 +Flow 291 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3814 +Flow 329 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3814 +Flow 125 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3826 +Flow 357 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3827 +Flow 167 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3826 +Flow 1787 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3828 +Flow 386 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3827 +Flow 1870 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3828 +Flow 614 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3851 +Flow 683 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3851 +Flow 1348 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3869 +Flow 1397 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3869 +Flow 1372 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3871 +Flow 1447 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3871 +Flow 798 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3878 +Flow 857 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3878 +Flow 89 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3880 +Flow 120 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3880 +Flow 1430 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3889 +Flow 1516 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3889 +Flow 624 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3905 +Flow 713 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3905 +Flow 1743 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3914 +Flow 1811 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3914 +Flow 300 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3918 +Flow 320 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3918 +Flow 1652 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3920 +Flow 1719 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3920 +Flow 256 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3945 +Flow 282 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3945 +Flow 955 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3971 +Flow 1000 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3971 +Flow 1518 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3986 +Flow 1580 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3986 +Flow 691 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3995 +Flow 756 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3995 +Flow 1692 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:3998 +Flow 1765 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:3998 +Flow 1842 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4001 +Flow 1919 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4001 +Flow 1484 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4002 +Flow 1565 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4002 +Flow 105 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4003 +Flow 1290 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4004 +Flow 145 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4003 +Flow 1360 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4004 +Flow 374 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4005 +Flow 410 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4005 +Flow 335 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4006 +Flow 367 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4006 +Flow 1645 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4045 +Flow 1726 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4045 +Flow 380 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4111 +Flow 404 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4111 +Flow 765 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4125 +Flow 832 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4125 +Flow 463 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4126 +Flow 485 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4126 +Flow 353 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4129 +Flow 390 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4129 +Flow 425 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4224 +Flow 441 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4224 +Flow 1346 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4242 +Flow 1399 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4242 +Flow 917 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4279 +Flow 980 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4279 +Flow 1699 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4321 +Flow 1758 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4321 +Flow 991 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4443 +Flow 1195 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4444 +Flow 1056 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4443 +Flow 1261 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4444 +Flow 1015 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4445 +Flow 1145 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4446 +Flow 1090 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4445 +Flow 1202 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4446 +Flow 617 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4449 +Flow 680 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4449 +Flow 898 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4550 +Flow 957 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4550 +Flow 541 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4567 +Flow 606 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4567 +Flow 459 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4662 +Flow 489 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4662 +Flow 92 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4848 +Flow 117 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4848 +Flow 692 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4900 +Flow 755 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4900 +Flow 1928 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:4998 +Flow 1994 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:4998 +Flow 1169 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5000 +Flow 1238 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5000 +Flow 1929 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5002 +Flow 1993 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5002 +Flow 1798 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5003 +Flow 1859 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5003 +Flow 1437 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5004 +Flow 1509 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5004 +Flow 1542 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5009 +Flow 1611 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5009 +Flow 1047 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5030 +Flow 1108 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5030 +Flow 212 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5033 +Flow 244 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5033 +Flow 1179 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5050 +Flow 1228 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5050 +Flow 739 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5051 +Flow 816 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5051 +Flow 1584 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5054 +Flow 1666 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5054 +Flow 339 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5080 +Flow 363 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5080 +Flow 1287 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5087 +Flow 1363 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5087 +Flow 1136 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5100 +Flow 1211 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5100 +Flow 136 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5101 +Flow 1026 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5102 +Flow 156 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5101 +Flow 1079 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5102 +Flow 887 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5120 +Flow 968 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5120 +Flow 260 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5190 +Flow 278 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5190 +Flow 438 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5200 +Flow 469 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5200 +Flow 288 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5214 +Flow 332 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5214 +Flow 338 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5221 +Flow 1165 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5222 +Flow 364 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5221 +Flow 1242 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5222 +Flow 1850 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5225 +Flow 1911 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5225 +Flow 1476 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5226 +Flow 1573 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5226 +Flow 1946 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5269 +Flow 1976 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5269 +Flow 835 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5280 +Flow 912 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5280 +Flow 1220 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5298 +Flow 1278 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5298 +Flow 1681 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5357 +Flow 1756 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5357 +Flow 738 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5405 +Flow 817 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5405 +Flow 48 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5414 +Flow 80 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5414 Flow 257 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5431 Flow 281 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5431 +Flow 378 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5440 +Flow 406 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5440 +Flow 275 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5500 +Flow 304 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5500 +Flow 794 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5510 +Flow 861 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5510 +Flow 1317 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:38292 +Flow 1380 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:38292 +Flow 1254 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5544 +Flow 1306 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5544 +Flow 1621 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5550 +Flow 1684 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5550 +Flow 1790 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5555 +Flow 1867 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5555 +Flow 868 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5560 +Flow 937 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5560 +Flow 795 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5566 +Flow 860 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5566 +Flow 356 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5631 +Flow 387 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5631 +Flow 1697 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5633 +Flow 1760 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5633 +Flow 1475 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5666 +Flow 1574 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5666 +Flow 1839 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5678 +Flow 1922 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5678 +Flow 915 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5679 +Flow 982 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5679 +Flow 804 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5718 +Flow 851 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5718 +Flow 518 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5730 +Flow 553 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5730 +Flow 1374 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5801 +Flow 1445 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5801 +Flow 995 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5802 +Flow 1052 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5802 +Flow 629 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5810 +Flow 708 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5810 +Flow 430 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5811 +Flow 477 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5811 +Flow 1469 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5815 +Flow 1532 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5815 +Flow 129 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5822 +Flow 163 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5822 +Flow 187 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5825 +Flow 228 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5825 +Flow 596 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5850 +Flow 659 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5850 +Flow 1641 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5859 +Flow 1700 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5859 +Flow 1889 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5862 +Flow 1963 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5862 +Flow 1027 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5877 +Flow 1078 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5877 +Flow 1022 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5902 +Flow 1083 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5902 +Flow 103 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5903 +Flow 1653 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5904 +Flow 147 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5903 +Flow 1718 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5904 +Flow 535 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5906 +Flow 1029 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5907 +Flow 612 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5906 +Flow 1076 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5907 +Flow 1298 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5910 +Flow 1774 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5911 +Flow 1352 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5910 +Flow 1835 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5911 +Flow 1803 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5915 +Flow 1854 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5915 +Flow 769 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5922 +Flow 828 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5922 +Flow 1805 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5925 +Flow 1852 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5925 +Flow 1522 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5950 +Flow 1601 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5950 +Flow 1292 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5952 +Flow 1358 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5952 +Flow 169 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5959 +Flow 1142 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5960 +Flow 205 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5959 +Flow 1336 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5961 +Flow 1205 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5960 +Flow 1947 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5962 +Flow 1409 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5961 +Flow 1975 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5962 +Flow 343 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5963 +Flow 359 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5963 +Flow 942 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5987 +Flow 1013 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5987 +Flow 570 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5988 +Flow 897 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5989 +Flow 650 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5988 +Flow 958 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5989 +Flow 1064 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5998 +Flow 1133 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5998 +Flow 628 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:5999 +Flow 709 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:5999 +Flow 50 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6000 +Flow 1481 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6001 +Flow 78 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6000 +Flow 1568 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6001 +Flow 1392 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6002 +Flow 1457 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6002 +Flow 1217 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6003 +Flow 1741 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6004 +Flow 1281 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6003 +Flow 1944 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6005 +Flow 1813 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6004 +Flow 1978 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6005 +Flow 1695 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6006 +Flow 1762 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6006 +Flow 1190 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6007 +Flow 1266 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6007 +Flow 1347 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6009 +Flow 1398 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6009 +Flow 517 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6025 +Flow 554 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6025 +Flow 1781 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6059 +Flow 1876 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6059 +Flow 1381 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6100 +Flow 1468 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6100 +Flow 1035 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6101 +Flow 1120 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6101 +Flow 582 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6106 +Flow 673 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6106 +Flow 1172 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6112 +Flow 1235 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6112 +Flow 1786 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6123 +Flow 1871 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6123 +Flow 1735 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6129 +Flow 1819 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6129 +Flow 1174 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6156 +Flow 1233 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6156 +Flow 461 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6346 +Flow 487 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6346 +Flow 266 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6389 +Flow 313 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6389 +Flow 1745 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6502 +Flow 1809 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6502 +Flow 742 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6510 +Flow 813 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6510 +Flow 210 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6543 +Flow 246 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6543 +Flow 638 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6547 +Flow 699 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6547 +Flow 1431 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6565 +Flow 1515 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6565 +Flow 1334 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6566 +Flow 1492 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6567 +Flow 1411 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6566 +Flow 1557 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6567 +Flow 191 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6580 +Flow 224 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6580 +Flow 1826 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6646 +Flow 1905 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6646 +Flow 1899 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6666 +Flow 1953 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6666 +Flow 1675 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6667 +Flow 1752 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6667 +Flow 1167 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6668 +Flow 1240 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6668 +Flow 180 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6669 +Flow 235 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6669 +Flow 956 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6689 +Flow 999 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6689 +Flow 1541 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6692 +Flow 1612 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6692 +Flow 290 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6699 +Flow 330 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6699 +Flow 627 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6779 +Flow 710 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6779 +Flow 259 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6788 +Flow 279 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6788 +Flow 1499 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6792 +Flow 1550 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6792 +Flow 262 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6839 +Flow 317 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6839 +Flow 884 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6881 +Flow 971 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6881 +Flow 1685 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6901 +Flow 1772 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6901 +Flow 1687 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:6969 +Flow 1770 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:6969 +Flow 616 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7001 +Flow 947 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7002 +Flow 681 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7001 +Flow 1008 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7002 +Flow 1440 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7004 +Flow 1506 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7004 +Flow 1802 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7007 +Flow 1855 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7007 +Flow 1018 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7019 +Flow 1087 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7019 +Flow 1255 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7025 +Flow 1305 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7025 +Flow 507 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7070 +Flow 524 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7070 +Flow 613 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7100 +Flow 684 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7100 +Flow 1676 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7103 +Flow 1751 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7103 +Flow 1042 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7106 +Flow 1113 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7106 +Flow 128 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7200 +Flow 583 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7201 +Flow 164 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7200 +Flow 672 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7201 +Flow 1698 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7402 +Flow 1759 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7402 +Flow 1473 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:40193 +Flow 1576 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:40193 +Flow 1498 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7435 +Flow 1551 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7435 +Flow 1438 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7443 +Flow 1508 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7443 +Flow 206 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7496 +Flow 250 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7496 +Flow 597 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7512 +Flow 658 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7512 +Flow 625 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7625 +Flow 712 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7625 +Flow 1539 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7627 +Flow 1614 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7627 +Flow 107 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7676 +Flow 143 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7676 +Flow 458 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7741 +Flow 490 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7741 +Flow 91 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7777 +Flow 913 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7778 +Flow 118 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7777 +Flow 984 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7778 +Flow 382 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7800 +Flow 402 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7800 +Flow 502 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7911 +Flow 529 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7911 +Flow 1847 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7920 +Flow 1914 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7920 +Flow 1171 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7921 +Flow 1236 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7921 +Flow 848 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7937 +Flow 1197 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7938 +Flow 899 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7937 +Flow 1259 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7938 +Flow 1388 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:7999 +Flow 1461 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:7999 +Flow 427 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8000 +Flow 1344 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8001 +Flow 480 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8000 +Flow 1401 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8001 +Flow 633 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8002 +Flow 704 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8002 +Flow 1176 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8007 +Flow 1231 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8007 +Flow 1478 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8011 +Flow 1571 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8011 +Flow 519 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8021 +Flow 1789 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8022 +Flow 552 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8021 +Flow 1868 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8022 +Flow 1383 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8031 +Flow 1466 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8031 +Flow 839 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8042 +Flow 908 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8042 +Flow 258 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8045 +Flow 280 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8045 +Flow 1442 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8081 +Flow 1504 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8081 +Flow 736 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8082 +Flow 1648 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8083 +Flow 819 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8082 +Flow 1896 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8084 +Flow 1723 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8083 +Flow 1956 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8084 +Flow 1147 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8085 +Flow 1200 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8085 +Flow 346 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8086 +Flow 1043 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8087 +Flow 397 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8086 +Flow 1218 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8088 +Flow 1112 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8087 +Flow 1280 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8088 +Flow 1094 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8089 +Flow 1161 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8089 +Flow 846 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8090 +Flow 901 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8090 +Flow 1890 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8093 +Flow 1962 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8093 +Flow 634 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8099 +Flow 703 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8099 +Flow 501 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8100 +Flow 530 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8100 +Flow 263 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:40911 +Flow 316 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:40911 +Flow 916 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8180 +Flow 981 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8180 +Flow 746 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8181 +Flow 809 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8181 +Flow 696 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8192 +Flow 751 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8192 +Flow 542 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8193 +Flow 1193 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8194 +Flow 605 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8193 +Flow 1263 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8194 +Flow 588 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8200 +Flow 667 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8200 +Flow 56 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8222 +Flow 72 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8222 +Flow 1628 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8254 +Flow 1713 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8254 +Flow 1544 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8290 +Flow 1609 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8290 +Flow 124 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8291 +Flow 578 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8292 +Flow 168 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8291 +Flow 642 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8292 +Flow 254 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8300 +Flow 284 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8300 +Flow 1669 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8383 +Flow 1733 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8383 +Flow 435 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8400 +Flow 472 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8400 +Flow 1096 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8402 +Flow 1159 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8402 +Flow 1519 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8443 +Flow 1579 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8443 +Flow 1470 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8500 +Flow 1531 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8500 +Flow 1168 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8600 +Flow 1239 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8600 +Flow 216 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8649 +Flow 240 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8649 +Flow 452 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8651 +Flow 1100 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8652 +Flow 496 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8651 +Flow 1155 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8652 +Flow 1793 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8654 +Flow 1864 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8654 +Flow 715 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8701 +Flow 790 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8701 +Flow 1219 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:41511 +Flow 1279 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:41511 +Flow 1933 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8800 +Flow 1989 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8800 +Flow 1041 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8873 +Flow 1114 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8873 +Flow 41 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8888 +Flow 60 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8888 +Flow 1214 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8899 +Flow 1284 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8899 +Flow 1037 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:8994 +Flow 1118 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:8994 +Flow 1635 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9000 +Flow 1706 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9000 +Flow 1182 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9001 +Flow 1273 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9001 +Flow 1063 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9002 +Flow 1134 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9002 +Flow 592 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9003 +Flow 663 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9003 +Flow 567 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9009 +Flow 653 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9009 +Flow 219 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9010 +Flow 1783 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9011 +Flow 237 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9010 +Flow 1874 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9011 +Flow 1477 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9040 +Flow 1572 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9040 +Flow 623 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9050 +Flow 674 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9050 +Flow 220 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9071 +Flow 236 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9071 +Flow 1025 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9080 +Flow 1080 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9080 +Flow 994 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9081 +Flow 1053 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9081 +Flow 1097 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9090 +Flow 1158 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9090 +Flow 574 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9091 +Flow 646 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9091 +Flow 1644 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9099 +Flow 1727 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9099 +Flow 1523 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9100 +Flow 1600 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9100 +Flow 630 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9101 +Flow 707 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9101 +Flow 138 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9102 +Flow 1299 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9103 +Flow 154 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9102 +Flow 1351 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9103 +Flow 437 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9110 +Flow 1671 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9111 +Flow 470 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9110 +Flow 1731 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9111 +Flow 102 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9200 +Flow 148 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9200 +Flow 1338 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9207 +Flow 1407 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9207 +Flow 548 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9220 +Flow 599 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9220 +Flow 1934 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9290 +Flow 1988 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9290 +Flow 464 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9415 +Flow 484 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9415 +Flow 797 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9485 +Flow 858 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9485 +Flow 171 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9500 +Flow 203 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9500 +Flow 943 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9502 +Flow 1065 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9503 +Flow 1012 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9502 +Flow 1132 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9503 +Flow 1633 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9535 +Flow 1708 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9535 +Flow 184 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9575 +Flow 231 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9575 +Flow 423 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9593 +Flow 1044 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9594 +Flow 443 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9593 +Flow 1111 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9594 +Flow 511 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9595 +Flow 560 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9595 +Flow 920 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9618 +Flow 977 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9618 +Flow 264 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9666 +Flow 315 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9666 +Flow 1829 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:42510 +Flow 1902 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:42510 +Flow 743 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9876 +Flow 1893 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9877 +Flow 812 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9876 +Flow 1959 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9877 +Flow 1023 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9878 +Flow 1082 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9878 +Flow 188 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9898 +Flow 227 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9898 +Flow 881 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9900 +Flow 924 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9900 +Flow 112 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9917 +Flow 139 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9917 +Flow 729 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9943 +Flow 776 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9943 +Flow 499 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9944 +Flow 532 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9944 +Flow 879 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9968 +Flow 926 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9968 +Flow 1691 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:9998 +Flow 1766 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:9998 +Flow 577 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10001 +Flow 643 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10001 +Flow 272 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10002 +Flow 733 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10003 +Flow 307 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10002 +Flow 822 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10003 +Flow 626 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10004 +Flow 711 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10004 +Flow 421 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10009 +Flow 803 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10010 +Flow 445 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10009 +Flow 852 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10010 +Flow 1925 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10012 +Flow 1969 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10012 +Flow 1216 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10024 +Flow 1536 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10025 +Flow 1282 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10024 +Flow 1617 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10025 +Flow 513 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10082 +Flow 558 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10082 +Flow 615 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10180 +Flow 682 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10180 +Flow 1540 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10215 +Flow 1613 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10215 +Flow 1887 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10243 +Flow 1965 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10243 +Flow 546 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10566 +Flow 601 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10566 +Flow 987 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10616 +Flow 1060 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10616 +Flow 731 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10617 +Flow 774 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10617 +Flow 46 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10621 +Flow 82 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10621 +Flow 131 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10626 +Flow 161 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10626 +Flow 1194 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10628 +Flow 1262 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10628 +Flow 44 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10629 +Flow 84 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10629 +Flow 720 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:10778 +Flow 785 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:10778 +Flow 876 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:11110 +Flow 929 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:11110 +Flow 498 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:11111 +Flow 533 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:11111 +Flow 251 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44176 +Flow 287 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44176 +Flow 1288 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44442 +Flow 1362 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44442 +Flow 919 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44443 +Flow 978 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44443 +Flow 370 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:44501 +Flow 414 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:44501 +Flow 255 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:11967 +Flow 283 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:11967 +Flow 986 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12000 +Flow 1061 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12000 +Flow 875 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12174 +Flow 930 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12174 +Flow 766 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12265 +Flow 831 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12265 +Flow 1017 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:45100 +Flow 1088 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:45100 +Flow 878 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:12345 +Flow 927 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:12345 +Flow 174 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13456 +Flow 200 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13456 +Flow 1651 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13722 +Flow 1720 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13722 +Flow 1021 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13782 +Flow 1175 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:13783 +Flow 1084 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13782 +Flow 1232 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:13783 +Flow 172 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14000 +Flow 202 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14000 +Flow 87 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14238 +Flow 122 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14238 +Flow 918 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14441 +Flow 979 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14441 +Flow 108 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:14442 +Flow 142 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:14442 +Flow 1138 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15000 +Flow 1209 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15000 +Flow 877 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15002 +Flow 1183 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15003 +Flow 928 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15002 +Flow 1272 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15003 +Flow 133 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15004 +Flow 159 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15004 +Flow 341 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:48080 +Flow 361 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:48080 +Flow 173 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15660 +Flow 201 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15660 +Flow 455 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:15742 +Flow 493 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:15742 +Flow 722 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16000 +Flow 783 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16000 +Flow 354 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16001 +Flow 389 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16001 +Flow 1472 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16012 +Flow 1577 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16012 +Flow 698 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16016 +Flow 749 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16016 +Flow 1738 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16018 +Flow 1816 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16018 +Flow 94 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16080 +Flow 115 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16080 +Flow 1350 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16113 +Flow 1426 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16113 +Flow 1935 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49152 +Flow 1987 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49152 +Flow 1343 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49153 +Flow 1402 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49153 +Flow 802 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49154 +Flow 853 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49154 +Flow 194 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49155 +Flow 793 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49156 +Flow 221 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49155 +Flow 1951 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49157 +Flow 862 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49156 +Flow 1971 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49157 +Flow 954 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49158 +Flow 1627 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49159 +Flow 1001 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49158 +Flow 1848 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49160 +Flow 1714 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49159 +Flow 1913 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49160 +Flow 1489 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49161 +Flow 1560 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49161 +Flow 767 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49163 +Flow 830 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49163 +Flow 727 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49165 +Flow 778 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49165 +Flow 1739 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49167 +Flow 1815 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49167 +Flow 1443 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49175 +Flow 1503 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49175 +Flow 426 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49176 +Flow 481 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49176 +Flow 1524 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49400 +Flow 1599 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49400 +Flow 1019 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16992 +Flow 1746 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:16993 +Flow 1086 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16992 +Flow 1808 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:16993 +Flow 253 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:49999 +Flow 1734 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50000 +Flow 285 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:49999 +Flow 1820 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50000 +Flow 1068 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50001 +Flow 1690 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50002 +Flow 1129 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50001 +Flow 1767 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50002 +Flow 1632 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50003 +Flow 1709 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50003 +Flow 1794 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50006 +Flow 1863 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50006 +Flow 1173 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50300 +Flow 1234 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50300 +Flow 1806 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50389 +Flow 1882 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50389 +Flow 990 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50500 +Flow 1057 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50500 +Flow 1799 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50636 +Flow 1858 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50636 +Flow 90 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:17877 +Flow 119 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:17877 +Flow 801 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:17988 +Flow 854 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:17988 +Flow 922 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:50800 +Flow 975 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:50800 +Flow 888 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:18040 +Flow 967 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:18040 +Flow 953 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:18101 +Flow 1002 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:18101 +Flow 1371 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:51103 +Flow 1448 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:51103 +Flow 695 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:51493 +Flow 752 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:51493 +Flow 1638 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:18988 +Flow 1703 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:18988 +Flow 302 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19101 +Flow 318 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19101 +Flow 1340 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19283 +Flow 1405 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19283 +Flow 686 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19315 +Flow 761 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19315 +Flow 1389 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19350 +Flow 1460 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19350 +Flow 381 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19780 +Flow 403 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19780 +Flow 996 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19801 +Flow 1051 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19801 +Flow 687 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:19842 +Flow 760 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:19842 +Flow 1441 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52673 +Flow 1505 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52673 +Flow 580 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20005 +Flow 640 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20005 +Flow 540 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20031 +Flow 607 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20031 +Flow 1737 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52822 +Flow 1817 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52822 +Flow 134 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52848 +Flow 158 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52848 +Flow 334 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:52869 +Flow 368 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:52869 +Flow 1674 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20221 +Flow 1753 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20221 +Flow 342 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20222 +Flow 360 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20222 +Flow 1595 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:20828 +Flow 1655 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:20828 +Flow 1502 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:54045 +Flow 1578 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:54045 +Flow 618 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:54328 +Flow 679 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:54328 +Flow 1521 not-detected: tcp 172.16.0.8:36050 -> 64.13.134.52:21571 +Flow 1602 not-detected: tcp 172.16.0.8:36051 -> 64.13.134.52:21571 diff --git a/test/results/flow-captured/default/teams.pcap.out b/test/results/flow-captured/default/teams.pcap.out index 4e70f518c..88544269b 100644 --- a/test/results/flow-captured/default/teams.pcap.out +++ b/test/results/flow-captured/default/teams.pcap.out @@ -1,9 +1,7 @@ Flow 48 risky: tcp 192.168.1.6:60559 -> 52.114.77.33:443 Flow 64 risky: tcp 192.168.1.6:50018 -> 52.114.250.123:443 Flow 78 risky: udp 93.71.110.205:16332 -> 192.168.1.6:50016 -Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 43 risky: tcp 192.168.1.6:60554 -> 52.113.194.132:443 -Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 4 risky: tcp 192.168.1.6:60532 -> 52.114.77.33:443 Flow 7 risky: tcp 192.168.1.6:60535 -> 52.114.77.33:443 Flow 25 risky: tcp 192.168.1.6:60543 -> 52.114.77.33:443 @@ -11,7 +9,9 @@ Flow 51 risky: tcp 192.168.1.6:60561 -> 52.114.77.33:443 Flow 74 risky: tcp 192.168.1.6:60567 -> 52.114.77.136:443 Flow 60 not-detected: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 Flow 60 midstream: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 -Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 +Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 10 risky: udp 192.168.1.6:64046 -> 192.168.1.1:53 +Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 68 risky: udp 192.168.1.6:50016 -> 52.114.250.141:3478 Flow 70 risky: udp 192.168.1.6:50036 -> 52.114.250.137:3478 +Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 diff --git a/test/results/flow-captured/default/telegram.pcap.out b/test/results/flow-captured/default/telegram.pcap.out index 4980a4853..aa219ed8e 100644 --- a/test/results/flow-captured/default/telegram.pcap.out +++ b/test/results/flow-captured/default/telegram.pcap.out @@ -1,7 +1,7 @@ Flow 25 not-detected: udp 192.168.1.77:23174 -> 192.168.1.52:31480 -Flow 32 risky: udp 192.168.1.77:5812 -> 192.168.1.1:53 Flow 27 risky: udp 192.168.1.77:47127 -> 192.168.1.1:53 -Flow 29 risky: udp 192.168.1.43:138 -> 192.168.1.255:138 Flow 44 not-detected: udp 192.168.1.77:28150 -> 87.11.205.195:59772 -Flow 26 not-detected: udp 192.168.1.77:23174 -> 87.11.205.195:60723 Flow 33 risky: udp 192.168.1.77:54595 -> 192.168.1.1:53 +Flow 29 risky: udp 192.168.1.43:138 -> 192.168.1.255:138 +Flow 32 risky: udp 192.168.1.77:5812 -> 192.168.1.1:53 +Flow 26 not-detected: udp 192.168.1.77:23174 -> 87.11.205.195:60723 diff --git a/test/results/flow-captured/default/telegram_videocall.pcapng.out b/test/results/flow-captured/default/telegram_videocall.pcapng.out index f94ea0087..099594be4 100644 --- a/test/results/flow-captured/default/telegram_videocall.pcapng.out +++ b/test/results/flow-captured/default/telegram_videocall.pcapng.out @@ -2,16 +2,16 @@ Flow 4 risky: tcp 192.168.12.169:37950 -> 149.154.167.91:443 Flow 7 risky: tcp 192.168.12.169:40830 -> 149.154.167.222:443 Flow 26 risky: udp 192.168.12.169:42405 -> 93.36.13.115:35393 Flow 8 risky: tcp 192.168.12.169:40832 -> 149.154.167.222:443 -Flow 10 risky: tcp 192.168.12.169:37966 -> 149.154.167.91:443 -Flow 18 risky: udp 192.168.12.169:40643 -> 91.108.9.35:1400 -Flow 24 risky: udp 192.168.12.169:42405 -> 10.46.103.200:42554 -Flow 5 risky: tcp 192.168.12.169:46862 -> 149.154.167.51:443 -Flow 6 risky: tcp 192.168.12.169:46866 -> 149.154.167.51:443 -Flow 9 risky: tcp 192.168.12.169:40834 -> 149.154.167.222:443 -Flow 19 risky: udp 192.168.12.169:49667 -> 91.108.13.23:1400 -Flow 25 risky: udp 192.168.12.169:40906 -> 10.46.103.200:42554 -Flow 20 risky: udp 192.168.12.169:49780 -> 91.108.17.2:1400 +Flow 34 midstream: tcp 18.195.162.93:443 -> 192.168.12.169:38956 Flow 33 risky: icmp 192.168.12.169 -> 91.108.17.2 Flow 32 risky: icmp 192.168.12.169 -> 91.108.13.23 Flow 31 risky: icmp 192.168.12.169 -> 91.108.9.35 -Flow 34 midstream: tcp 18.195.162.93:443 -> 192.168.12.169:38956 +Flow 25 risky: udp 192.168.12.169:40906 -> 10.46.103.200:42554 +Flow 24 risky: udp 192.168.12.169:42405 -> 10.46.103.200:42554 +Flow 18 risky: udp 192.168.12.169:40643 -> 91.108.9.35:1400 +Flow 10 risky: tcp 192.168.12.169:37966 -> 149.154.167.91:443 +Flow 19 risky: udp 192.168.12.169:49667 -> 91.108.13.23:1400 +Flow 20 risky: udp 192.168.12.169:49780 -> 91.108.17.2:1400 +Flow 9 risky: tcp 192.168.12.169:40834 -> 149.154.167.222:443 +Flow 5 risky: tcp 192.168.12.169:46862 -> 149.154.167.51:443 +Flow 6 risky: tcp 192.168.12.169:46866 -> 149.154.167.51:443 diff --git a/test/results/flow-captured/default/tftp.pcap.out b/test/results/flow-captured/default/tftp.pcap.out index 86788b75a..78b087380 100644 --- a/test/results/flow-captured/default/tftp.pcap.out +++ b/test/results/flow-captured/default/tftp.pcap.out @@ -1,3 +1,3 @@ Flow 4 risky: udp 192.168.0.10:3445 -> 192.168.0.253:50618 -Flow 7 risky: udp 172.28.5.170:62058 -> 172.28.5.91:44618 Flow 9 risky: udp 192.168.2.200:47649 -> 192.168.2.45:35840 +Flow 7 risky: udp 172.28.5.170:62058 -> 172.28.5.91:44618 diff --git a/test/results/flow-captured/default/tinc.pcap.out b/test/results/flow-captured/default/tinc.pcap.out index 675bcae5f..07eac713e 100644 --- a/test/results/flow-captured/default/tinc.pcap.out +++ b/test/results/flow-captured/default/tinc.pcap.out @@ -1,4 +1,4 @@ Flow 3 risky: udp 131.114.168.27:55655 -> 185.83.218.112:55655 Flow 4 risky: udp 185.83.218.112:55656 -> 131.114.168.27:55656 -Flow 2 risky: tcp 131.114.168.27:49290 -> 185.83.218.112:55656 Flow 1 risky: tcp 131.114.168.27:59244 -> 185.83.218.112:55655 +Flow 2 risky: tcp 131.114.168.27:49290 -> 185.83.218.112:55656 diff --git a/test/results/flow-captured/default/tls_certificate_too_long.pcap.out b/test/results/flow-captured/default/tls_certificate_too_long.pcap.out index da31cb0fa..6a426923a 100644 --- a/test/results/flow-captured/default/tls_certificate_too_long.pcap.out +++ b/test/results/flow-captured/default/tls_certificate_too_long.pcap.out @@ -4,8 +4,8 @@ Flow 25 risky: tcp 192.168.1.121:53428 -> 52.98.163.18:443 Flow 25 midstream: tcp 192.168.1.121:53428 -> 52.98.163.18:443 Flow 18 risky: tcp 192.168.1.121:53912 -> 2.22.33.235:80 Flow 19 risky: tcp 192.168.1.121:53913 -> 2.22.33.235:80 -Flow 23 risky: udp 192.168.1.121:51998 -> 8.8.8.8:53 -Flow 3 risky: udp 192.168.1.121:52251 -> 8.8.8.8:53 Flow 20 midstream: tcp 192.168.1.121:53905 -> 140.82.113.26:443 Flow 2 not-detected: tcp 192.168.1.121:52721 -> 192.168.1.139:55367 Flow 2 midstream: tcp 192.168.1.121:52721 -> 192.168.1.139:55367 +Flow 23 risky: udp 192.168.1.121:51998 -> 8.8.8.8:53 +Flow 3 risky: udp 192.168.1.121:52251 -> 8.8.8.8:53 diff --git a/test/results/flow-captured/default/tls_heur__trojan-tcp-tls.pcapng.out b/test/results/flow-captured/default/tls_heur__trojan-tcp-tls.pcapng.out index 85942bf64..903e4868a 100644 --- a/test/results/flow-captured/default/tls_heur__trojan-tcp-tls.pcapng.out +++ b/test/results/flow-captured/default/tls_heur__trojan-tcp-tls.pcapng.out @@ -1,3 +1,3 @@ +Flow 2 risky: udp 127.0.0.1:52786 -> 127.0.0.53:53 Flow 5 risky: udp 127.0.0.1:53154 -> 127.0.0.53:53 Flow 7 risky: udp 192.168.1.183:39434 -> 192.168.1.253:53 -Flow 2 risky: udp 127.0.0.1:52786 -> 127.0.0.53:53 diff --git a/test/results/flow-captured/default/tls_heur__vmess-tcp.pcapng.out b/test/results/flow-captured/default/tls_heur__vmess-tcp.pcapng.out index 57479df0d..d1b413e70 100644 --- a/test/results/flow-captured/default/tls_heur__vmess-tcp.pcapng.out +++ b/test/results/flow-captured/default/tls_heur__vmess-tcp.pcapng.out @@ -1,2 +1,2 @@ -Flow 3 not-detected: tcp 127.0.0.1:40818 -> 127.0.0.1:1234 Flow 2 risky: udp 127.0.0.1:35957 -> 127.0.0.53:53 +Flow 3 not-detected: tcp 127.0.0.1:40818 -> 127.0.0.1:1234 diff --git a/test/results/flow-captured/default/tumblr.pcap.out b/test/results/flow-captured/default/tumblr.pcap.out index 29291a1a6..8e40bd3ca 100644 --- a/test/results/flow-captured/default/tumblr.pcap.out +++ b/test/results/flow-captured/default/tumblr.pcap.out @@ -1,10 +1,10 @@ Flow 6 risky: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:42908 -> 64:ff9b::98c7:1593:443 Flow 6 midstream: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:42908 -> 64:ff9b::98c7:1593:443 -Flow 2 risky: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:48240 -> 64:ff9b::9765:789d:443 -Flow 2 midstream: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:48240 -> 64:ff9b::9765:789d:443 -Flow 14 risky: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:56794 -> 64:ff9b::c000:4d03:443 -Flow 14 midstream: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:56794 -> 64:ff9b::c000:4d03:443 Flow 9 risky: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:43434 -> 64:ff9b::c000:4d28:443 Flow 9 midstream: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:43434 -> 64:ff9b::c000:4d28:443 +Flow 2 risky: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:48240 -> 64:ff9b::9765:789d:443 +Flow 2 midstream: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:48240 -> 64:ff9b::9765:789d:443 Flow 15 risky: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:51874 -> 64:ff9b::c000:4c03:443 Flow 15 midstream: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:51874 -> 64:ff9b::c000:4c03:443 +Flow 14 risky: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:56794 -> 64:ff9b::c000:4d03:443 +Flow 14 midstream: tcp 2a01:cb01:2049:8b07:991d:ec85:28df:f629:56794 -> 64:ff9b::c000:4d03:443 diff --git a/test/results/flow-captured/default/viber.pcap.out b/test/results/flow-captured/default/viber.pcap.out index 4222474a3..31963ab9e 100644 --- a/test/results/flow-captured/default/viber.pcap.out +++ b/test/results/flow-captured/default/viber.pcap.out @@ -1,6 +1,6 @@ -Flow 26 risky: icmp 192.168.0.17 -> 192.168.0.15 Flow 1 guessed: tcp 192.168.0.17:33208 -> 52.0.253.101:4244 Flow 1 not-detected: tcp 192.168.0.17:33208 -> 52.0.253.101:4244 Flow 1 midstream: tcp 192.168.0.17:33208 -> 52.0.253.101:4244 -Flow 29 midstream: tcp 192.168.2.100:42900 -> 44.192.202.74:4244 +Flow 26 risky: icmp 192.168.0.17 -> 192.168.0.15 Flow 30 risky: udp 192.168.12.156:40482 -> 18.195.4.121:443 +Flow 29 midstream: tcp 192.168.2.100:42900 -> 44.192.202.74:4244 diff --git a/test/results/flow-captured/default/vk.pcapng.out b/test/results/flow-captured/default/vk.pcapng.out index ce73be080..a57e81370 100644 --- a/test/results/flow-captured/default/vk.pcapng.out +++ b/test/results/flow-captured/default/vk.pcapng.out @@ -1,4 +1,4 @@ -Flow 2 risky: tcp 192.168.1.249:40344 -> 87.240.129.140:443 -Flow 2 midstream: tcp 192.168.1.249:40344 -> 87.240.129.140:443 Flow 3 risky: tcp 192.168.1.249:60436 -> 87.240.132.78:443 Flow 3 midstream: tcp 192.168.1.249:60436 -> 87.240.132.78:443 +Flow 2 risky: tcp 192.168.1.249:40344 -> 87.240.129.140:443 +Flow 2 midstream: tcp 192.168.1.249:40344 -> 87.240.129.140:443 diff --git a/test/results/flow-captured/default/wa_video.pcap.out b/test/results/flow-captured/default/wa_video.pcap.out index 452806841..95578680e 100644 --- a/test/results/flow-captured/default/wa_video.pcap.out +++ b/test/results/flow-captured/default/wa_video.pcap.out @@ -1,6 +1,6 @@ Flow 3 risky: udp 192.168.2.12:53688 -> 31.13.86.48:3478 Flow 11 risky: udp 192.168.2.12:53688 -> 91.252.56.51:32641 +Flow 10 risky: udp 192.168.2.12:53688 -> 1.60.78.64:59491 Flow 2 guessed: tcp 192.168.2.12:49355 -> 157.240.20.53:5222 Flow 2 not-detected: tcp 192.168.2.12:49355 -> 157.240.20.53:5222 Flow 2 midstream: tcp 192.168.2.12:49355 -> 157.240.20.53:5222 -Flow 10 risky: udp 192.168.2.12:53688 -> 1.60.78.64:59491 diff --git a/test/results/flow-captured/default/wa_voice.pcap.out b/test/results/flow-captured/default/wa_voice.pcap.out index b527a48df..3b1cdbbae 100644 --- a/test/results/flow-captured/default/wa_voice.pcap.out +++ b/test/results/flow-captured/default/wa_voice.pcap.out @@ -1,11 +1,11 @@ Flow 14 risky: udp 192.168.2.12:56328 -> 31.13.86.48:3478 Flow 23 risky: udp 91.252.56.51:32704 -> 192.168.2.12:56328 -Flow 3 midstream: tcp 192.168.2.12:49354 -> 17.242.60.84:5223 -Flow 25 not-detected: tcp 192.168.2.12:49352 -> 169.254.162.244:49159 -Flow 25 midstream: tcp 192.168.2.12:49352 -> 169.254.162.244:49159 -Flow 9 midstream: tcp 17.171.47.85:443 -> 192.168.2.12:50502 Flow 18 risky: udp 192.168.2.12:56328 -> 157.240.196.62:3478 Flow 16 risky: udp 192.168.2.12:56328 -> 157.240.193.48:3478 +Flow 9 midstream: tcp 17.171.47.85:443 -> 192.168.2.12:50502 +Flow 25 not-detected: tcp 192.168.2.12:49352 -> 169.254.162.244:49159 +Flow 25 midstream: tcp 192.168.2.12:49352 -> 169.254.162.244:49159 Flow 24 risky: udp 192.168.2.12:56328 -> 1.60.78.64:64282 Flow 17 risky: udp 192.168.2.12:56328 -> 179.60.192.48:3478 Flow 15 risky: udp 192.168.2.12:56328 -> 185.60.216.51:3478 +Flow 3 midstream: tcp 192.168.2.12:49354 -> 17.242.60.84:5223 diff --git a/test/results/flow-captured/default/waze.pcap.out b/test/results/flow-captured/default/waze.pcap.out index f35eddff7..26464d3f1 100644 --- a/test/results/flow-captured/default/waze.pcap.out +++ b/test/results/flow-captured/default/waze.pcap.out @@ -6,9 +6,9 @@ Flow 10 risky: tcp 10.8.0.1:45540 -> 54.230.227.172:80 Flow 15 risky: tcp 10.8.0.1:45546 -> 54.230.227.172:80 Flow 16 risky: tcp 10.8.0.1:45552 -> 54.230.227.172:80 Flow 17 risky: tcp 10.8.0.1:45554 -> 54.230.227.172:80 +Flow 18 risky: tcp 10.8.0.1:39021 -> 52.17.114.219:443 +Flow 19 risky: tcp 10.8.0.1:36312 -> 176.34.186.180:443 Flow 5 risky: tcp 10.8.0.1:36100 -> 46.51.173.182:443 Flow 6 risky: tcp 10.8.0.1:36102 -> 46.51.173.182:443 -Flow 19 risky: tcp 10.8.0.1:36312 -> 176.34.186.180:443 -Flow 18 risky: tcp 10.8.0.1:39021 -> 52.17.114.219:443 Flow 1 not-detected: tcp 10.16.37.157:42256 -> 174.37.231.81:5222 Flow 1 midstream: tcp 10.16.37.157:42256 -> 174.37.231.81:5222 diff --git a/test/results/flow-captured/default/webdav.pcap.out b/test/results/flow-captured/default/webdav.pcap.out index 65eb41d40..14bd8e9a6 100644 --- a/test/results/flow-captured/default/webdav.pcap.out +++ b/test/results/flow-captured/default/webdav.pcap.out @@ -1,8 +1,8 @@ Flow 1 risky: tcp 10.24.8.189:50652 -> 104.156.149.6:80 -Flow 7 risky: tcp 192.168.16.173:47726 -> 198.244.151.63:80 -Flow 4 risky: tcp 192.168.16.173:55974 -> 198.244.151.63:80 -Flow 3 risky: tcp 192.168.16.173:41714 -> 198.244.151.63:80 Flow 2 risky: tcp 192.168.16.173:35612 -> 198.244.151.63:80 -Flow 8 risky: tcp 192.168.16.173:57432 -> 198.244.151.63:80 +Flow 3 risky: tcp 192.168.16.173:41714 -> 198.244.151.63:80 Flow 5 risky: tcp 192.168.16.173:47432 -> 198.244.151.63:80 Flow 6 risky: tcp 192.168.16.173:47436 -> 198.244.151.63:80 +Flow 7 risky: tcp 192.168.16.173:47726 -> 198.244.151.63:80 +Flow 4 risky: tcp 192.168.16.173:55974 -> 198.244.151.63:80 +Flow 8 risky: tcp 192.168.16.173:57432 -> 198.244.151.63:80 diff --git a/test/results/flow-captured/default/webex.pcap.out b/test/results/flow-captured/default/webex.pcap.out index 33650debc..4ebbd9fb9 100644 --- a/test/results/flow-captured/default/webex.pcap.out +++ b/test/results/flow-captured/default/webex.pcap.out @@ -1,9 +1,9 @@ Flow 45 risky: tcp 10.8.0.1:59756 -> 78.46.237.91:80 Flow 46 risky: tcp 10.8.0.1:59757 -> 78.46.237.91:80 -Flow 52 risky: tcp 10.8.0.1:51857 -> 62.109.229.158:443 -Flow 33 midstream: tcp 10.133.206.47:33459 -> 80.74.110.68:443 Flow 36 risky: tcp 10.8.0.1:51154 -> 62.109.224.120:443 Flow 37 risky: tcp 10.8.0.1:51155 -> 62.109.224.120:443 +Flow 52 risky: tcp 10.8.0.1:51857 -> 62.109.229.158:443 +Flow 33 midstream: tcp 10.133.206.47:33459 -> 80.74.110.68:443 Flow 1 risky: tcp 10.8.0.1:41346 -> 64.68.105.103:443 Flow 2 risky: tcp 10.8.0.1:41348 -> 64.68.105.103:443 Flow 9 risky: tcp 10.8.0.1:41358 -> 64.68.105.103:443 diff --git a/test/results/flow-captured/default/weibo.pcap.out b/test/results/flow-captured/default/weibo.pcap.out index 1c8e8c934..81ca9aa3b 100644 --- a/test/results/flow-captured/default/weibo.pcap.out +++ b/test/results/flow-captured/default/weibo.pcap.out @@ -1,2 +1,2 @@ -Flow 15 risky: udp 192.168.1.105:53543 -> 192.168.1.1:53 Flow 21 risky: udp 192.168.1.105:50640 -> 192.168.1.1:53 +Flow 15 risky: udp 192.168.1.105:53543 -> 192.168.1.1:53 diff --git a/test/results/flow-captured/default/whatsapp.pcap.out b/test/results/flow-captured/default/whatsapp.pcap.out index 104d17010..22e11bdcd 100644 --- a/test/results/flow-captured/default/whatsapp.pcap.out +++ b/test/results/flow-captured/default/whatsapp.pcap.out @@ -1,14 +1,14 @@ Flow 1 risky: tcp 192.168.2.100:44804 -> 179.60.195.49:5222 -Flow 6 risky: tcp 192.168.2.100:42646 -> 179.60.195.49:5222 Flow 2 risky: tcp 192.168.2.100:40084 -> 179.60.195.49:5222 Flow 5 risky: tcp 192.168.2.100:40178 -> 179.60.195.49:5222 Flow 7 risky: tcp 192.168.2.100:40204 -> 179.60.195.49:5222 Flow 3 risky: tcp 192.168.2.100:42272 -> 179.60.195.49:5222 Flow 4 risky: tcp 192.168.2.100:42436 -> 179.60.195.49:5222 +Flow 6 risky: tcp 192.168.2.100:42646 -> 179.60.195.49:5222 Flow 8 risky: tcp 192.168.2.100:45932 -> 179.60.195.49:5222 Flow 9 risky: tcp 192.168.2.100:40954 -> 179.60.195.49:5222 -Flow 11 risky: tcp 192.168.2.100:49026 -> 179.60.195.33:5222 Flow 10 risky: tcp 192.168.2.100:41214 -> 179.60.195.49:5222 +Flow 11 risky: tcp 192.168.2.100:49026 -> 179.60.195.33:5222 Flow 12 risky: tcp 192.168.2.100:41288 -> 179.60.195.49:5222 Flow 13 risky: tcp 192.168.2.100:41610 -> 179.60.195.49:5222 Flow 14 risky: tcp 192.168.2.100:41808 -> 179.60.195.49:5222 @@ -34,28 +34,28 @@ Flow 32 risky: tcp 192.168.2.100:43954 -> 179.60.195.49:5222 Flow 35 risky: tcp 192.168.2.100:40990 -> 179.60.195.33:5222 Flow 34 risky: tcp 192.168.2.100:43978 -> 179.60.195.49:5222 Flow 36 risky: tcp 192.168.2.100:45290 -> 179.60.195.49:5222 +Flow 38 risky: tcp 192.168.2.100:47948 -> 179.60.195.49:5222 Flow 37 risky: tcp 192.168.2.100:51544 -> 179.60.195.49:5222 Flow 39 risky: tcp 192.168.2.100:51724 -> 179.60.195.49:5222 -Flow 38 risky: tcp 192.168.2.100:47948 -> 179.60.195.49:5222 Flow 40 risky: tcp 192.168.2.100:45334 -> 179.60.195.49:5222 Flow 42 risky: tcp 192.168.2.100:41664 -> 179.60.195.33:5222 Flow 41 risky: tcp 192.168.2.100:52152 -> 179.60.195.49:5222 Flow 44 risky: tcp 192.168.2.100:41722 -> 179.60.195.33:5222 Flow 43 risky: tcp 192.168.2.100:52294 -> 179.60.195.49:5222 -Flow 46 risky: tcp 192.168.2.100:55038 -> 179.60.195.49:5222 Flow 47 risky: tcp 192.168.2.100:55476 -> 31.13.70.50:5222 Flow 45 risky: tcp 192.168.2.100:48234 -> 179.60.195.49:5222 +Flow 46 risky: tcp 192.168.2.100:55038 -> 179.60.195.49:5222 Flow 50 risky: tcp 192.168.2.100:42622 -> 179.60.195.33:5222 Flow 52 risky: tcp 192.168.2.100:42796 -> 179.60.195.33:5222 Flow 53 risky: tcp 192.168.2.100:43152 -> 179.60.195.33:5222 Flow 49 risky: tcp 192.168.2.100:45850 -> 179.60.195.49:5222 -Flow 51 risky: tcp 192.168.2.100:58198 -> 179.60.195.49:5222 Flow 48 risky: tcp 192.168.2.100:48538 -> 179.60.195.49:5222 +Flow 51 risky: tcp 192.168.2.100:58198 -> 179.60.195.49:5222 +Flow 58 risky: tcp 192.168.2.100:45130 -> 179.60.195.33:5222 +Flow 56 risky: tcp 192.168.2.100:46598 -> 179.60.195.49:5222 Flow 54 risky: tcp 192.168.2.100:46732 -> 179.60.195.49:5222 Flow 57 risky: tcp 192.168.2.100:46768 -> 179.60.195.49:5222 -Flow 58 risky: tcp 192.168.2.100:45130 -> 179.60.195.33:5222 Flow 55 risky: tcp 192.168.2.100:58882 -> 179.60.195.49:5222 -Flow 56 risky: tcp 192.168.2.100:46598 -> 179.60.195.49:5222 Flow 59 risky: tcp 192.168.2.100:60328 -> 179.60.195.49:5222 Flow 61 risky: tcp 192.168.2.100:47086 -> 179.60.195.49:5222 Flow 60 risky: tcp 192.168.2.100:32798 -> 179.60.195.49:5222 @@ -67,20 +67,20 @@ Flow 66 risky: tcp 192.168.2.100:49250 -> 179.60.195.49:5222 Flow 67 risky: tcp 192.168.2.100:47296 -> 179.60.195.49:5222 Flow 68 risky: tcp 192.168.2.100:47900 -> 179.60.195.49:5222 Flow 69 risky: tcp 192.168.2.100:47590 -> 179.60.195.49:5222 -Flow 70 risky: tcp 192.168.2.100:49428 -> 179.60.195.49:5222 Flow 71 risky: tcp 192.168.2.100:47634 -> 179.60.195.49:5222 -Flow 72 risky: tcp 192.168.2.100:49610 -> 179.60.195.49:5222 +Flow 70 risky: tcp 192.168.2.100:49428 -> 179.60.195.49:5222 Flow 73 risky: tcp 192.168.2.100:37378 -> 179.60.195.49:5222 Flow 74 risky: tcp 192.168.2.100:47738 -> 179.60.195.49:5222 -Flow 84 risky: tcp 192.168.2.100:47284 -> 179.60.195.33:5222 -Flow 85 risky: tcp 192.168.2.100:39334 -> 179.60.195.49:5222 +Flow 72 risky: tcp 192.168.2.100:49610 -> 179.60.195.49:5222 Flow 75 risky: tcp 192.168.2.100:37404 -> 179.60.195.49:5222 -Flow 76 risky: tcp 192.168.2.100:47776 -> 179.60.195.49:5222 -Flow 79 risky: tcp 192.168.2.100:47810 -> 179.60.195.49:5222 Flow 78 risky: tcp 192.168.2.100:37674 -> 179.60.195.49:5222 Flow 77 risky: tcp 192.168.2.100:37766 -> 179.60.195.49:5222 Flow 81 risky: tcp 192.168.2.100:37822 -> 179.60.195.49:5222 +Flow 83 risky: tcp 192.168.2.100:38234 -> 179.60.195.49:5222 +Flow 85 risky: tcp 192.168.2.100:39334 -> 179.60.195.49:5222 Flow 86 risky: tcp 192.168.2.100:40006 -> 179.60.195.49:5222 Flow 80 risky: tcp 192.168.2.100:46394 -> 179.60.195.33:5222 -Flow 83 risky: tcp 192.168.2.100:38234 -> 179.60.195.49:5222 Flow 82 risky: tcp 192.168.2.100:46576 -> 179.60.195.33:5222 +Flow 84 risky: tcp 192.168.2.100:47284 -> 179.60.195.33:5222 +Flow 76 risky: tcp 192.168.2.100:47776 -> 179.60.195.49:5222 +Flow 79 risky: tcp 192.168.2.100:47810 -> 179.60.195.49:5222 diff --git a/test/results/flow-captured/default/whatsapp_login_call.pcap.out b/test/results/flow-captured/default/whatsapp_login_call.pcap.out index 2dbd14228..ddc9a457e 100644 --- a/test/results/flow-captured/default/whatsapp_login_call.pcap.out +++ b/test/results/flow-captured/default/whatsapp_login_call.pcap.out @@ -3,11 +3,11 @@ Flow 29 risky: udp 192.168.2.4:51518 -> 31.13.93.48:3478 Flow 55 risky: udp 192.168.2.4:52794 -> 91.253.176.65:9665 Flow 38 risky: udp 192.168.2.4:51518 -> 1.194.90.191:60312 Flow 6 midstream: tcp 192.168.2.4:49172 -> 23.50.148.228:443 -Flow 53 risky: udp 192.168.2.4:52794 -> 31.13.84.48:3478 Flow 54 risky: udp 192.168.2.4:52794 -> 1.194.90.191:51727 +Flow 53 risky: udp 192.168.2.4:52794 -> 31.13.84.48:3478 +Flow 17 risky: tcp 192.168.2.4:49204 -> 17.173.66.102:443 +Flow 57 risky: tcp 192.168.2.4:49205 -> 17.173.66.102:443 Flow 1 risky: tcp 192.168.2.4:49199 -> 17.172.100.70:993 Flow 1 midstream: tcp 192.168.2.4:49199 -> 17.172.100.70:993 -Flow 16 midstream: tcp 192.168.2.4:49193 -> 17.110.229.14:5223 Flow 13 risky: tcp 192.168.2.4:49201 -> 17.178.104.12:443 -Flow 17 risky: tcp 192.168.2.4:49204 -> 17.173.66.102:443 -Flow 57 risky: tcp 192.168.2.4:49205 -> 17.173.66.102:443 +Flow 16 midstream: tcp 192.168.2.4:49193 -> 17.110.229.14:5223 diff --git a/test/results/flow-captured/default/wow.pcap.out b/test/results/flow-captured/default/wow.pcap.out index d54622fae..7f4ebdbdf 100644 --- a/test/results/flow-captured/default/wow.pcap.out +++ b/test/results/flow-captured/default/wow.pcap.out @@ -1,2 +1,2 @@ -Flow 1 risky: tcp 192.168.178.20:39309 -> 12.129.222.53:80 Flow 2 risky: tcp 192.168.178.20:39312 -> 24.105.29.21:80 +Flow 1 risky: tcp 192.168.178.20:39309 -> 12.129.222.53:80 diff --git a/test/results/flow-captured/default/zoom.pcap.out b/test/results/flow-captured/default/zoom.pcap.out index 7537da3f2..23e621dfe 100644 --- a/test/results/flow-captured/default/zoom.pcap.out +++ b/test/results/flow-captured/default/zoom.pcap.out @@ -1,5 +1,5 @@ -Flow 9 risky: udp 192.168.1.117:65394 -> 192.168.1.1:53 Flow 14 risky: udp 192.168.1.117:23903 -> 162.255.38.14:3479 Flow 16 risky: tcp 192.168.1.117:53872 -> 35.186.224.53:443 Flow 16 midstream: tcp 192.168.1.117:53872 -> 35.186.224.53:443 +Flow 9 risky: udp 192.168.1.117:65394 -> 192.168.1.1:53 Flow 30 risky: tcp 192.168.1.117:54871 -> 109.94.160.99:443 diff --git a/test/results/flow-captured/enable_payload_stat/1kxun.pcap.out b/test/results/flow-captured/enable_payload_stat/1kxun.pcap.out index 034a664ad..fb82f703b 100644 --- a/test/results/flow-captured/enable_payload_stat/1kxun.pcap.out +++ b/test/results/flow-captured/enable_payload_stat/1kxun.pcap.out @@ -1,111 +1,111 @@ Flow 37 risky: tcp 192.168.115.8:49606 -> 106.185.35.110:80 Flow 41 risky: tcp 192.168.115.8:49609 -> 42.120.51.152:8080 -Flow 14 risky: udp 192.168.115.8:51024 -> 8.8.8.8:53 -Flow 20 risky: udp 192.168.3.95:58779 -> 224.0.0.252:5355 Flow 19 risky: udp fe80::e98f:bae2:19f7:6b0f:58779 -> ff02::1:3:5355 +Flow 20 risky: udp 192.168.3.95:58779 -> 224.0.0.252:5355 Flow 24 risky: udp 192.168.115.8:52723 -> 168.95.1.1:53 +Flow 14 risky: udp 192.168.115.8:51024 -> 8.8.8.8:53 Flow 16 risky: udp 192.168.115.8:52723 -> 8.8.8.8:53 -Flow 35 risky: udp 192.168.5.67:138 -> 192.168.255.255:138 -Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 39 risky: udp 192.168.115.8:54420 -> 8.8.8.8:53 +Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 26 risky: udp 192.168.115.8:60724 -> 8.8.8.8:53 +Flow 35 risky: udp 192.168.5.67:138 -> 192.168.255.255:138 Flow 33 risky: udp fe80::e98f:bae2:19f7:6b0f:54888 -> ff02::1:3:5355 -Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 -Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 -Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 -Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 -Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 -Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 Flow 38 risky: tcp 192.168.115.8:49607 -> 218.244.135.170:9099 +Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 +Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 Flow 42 not-detected: udp 192.168.10.110:60480 -> 255.255.255.255:62976 -Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 -Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 -Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 +Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 +Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 +Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 +Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 Flow 65 not-detected: udp 192.168.140.140:62976 -> 255.255.255.255:62976 Flow 71 not-detected: udp 192.168.10.7:62976 -> 255.255.255.255:62976 Flow 22 not-detected: udp 192.168.125.30:62976 -> 255.255.255.255:62976 Flow 88 not-detected: udp 192.168.119.1:56861 -> 255.255.255.255:5678 -Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 +Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 +Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 +Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 +Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 +Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 +Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 Flow 46 risky: tcp 192.168.115.8:49612 -> 183.131.48.145:80 Flow 49 risky: tcp 192.168.115.8:49613 -> 183.131.48.144:80 -Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 -Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 -Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 +Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 Flow 86 not-detected: udp 59.120.208.212:32768 -> 255.255.255.255:1947 Flow 142 midstream: tcp 192.168.2.126:46170 -> 172.105.121.82:80 Flow 146 midstream: tcp 192.168.2.126:45380 -> 161.117.13.29:80 Flow 160 midstream: tcp 192.168.2.126:49380 -> 14.136.136.108:80 Flow 158 midstream: tcp 192.168.2.126:49372 -> 14.136.136.108:80 Flow 150 midstream: tcp 192.168.2.126:45416 -> 161.117.13.29:80 -Flow 147 midstream: tcp 192.168.2.126:45388 -> 161.117.13.29:80 -Flow 148 midstream: tcp 192.168.2.126:45398 -> 161.117.13.29:80 -Flow 163 risky: tcp 192.168.2.126:44368 -> 172.217.18.98:80 -Flow 163 midstream: tcp 192.168.2.126:44368 -> 172.217.18.98:80 -Flow 178 risky: tcp 192.168.2.126:56826 -> 8.209.97.107:80 -Flow 178 midstream: tcp 192.168.2.126:56826 -> 8.209.97.107:80 -Flow 149 midstream: tcp 192.168.2.126:45414 -> 161.117.13.29:80 -Flow 151 midstream: tcp 192.168.2.126:45422 -> 161.117.13.29:80 -Flow 152 midstream: tcp 192.168.2.126:45424 -> 161.117.13.29:80 -Flow 192 midstream: tcp 192.168.2.126:54810 -> 18.233.123.55:80 -Flow 184 midstream: tcp 192.168.2.126:36636 -> 18.64.103.30:80 -Flow 185 midstream: tcp 192.168.2.126:36640 -> 18.64.103.30:80 -Flow 186 midstream: tcp 192.168.2.126:36654 -> 18.64.103.30:80 +Flow 130 risky: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 +Flow 130 midstream: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 +Flow 131 risky: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 +Flow 131 midstream: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 +Flow 132 risky: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 +Flow 132 midstream: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 +Flow 196 risky: tcp 192.168.2.126:35426 -> 8.209.112.118:80 +Flow 196 midstream: tcp 192.168.2.126:35426 -> 8.209.112.118:80 +Flow 172 midstream: tcp 192.168.2.126:59324 -> 104.117.221.10:80 +Flow 153 risky: tcp 192.168.2.126:41390 -> 18.64.79.37:80 +Flow 153 midstream: tcp 192.168.2.126:41390 -> 18.64.79.37:80 +Flow 191 midstream: tcp 192.168.2.126:41940 -> 18.64.79.50:80 +Flow 179 midstream: tcp 192.168.2.126:43272 -> 18.64.79.58:80 +Flow 195 midstream: tcp 192.168.2.126:33042 -> 3.122.190.70:80 Flow 180 midstream: tcp 192.168.2.126:58758 -> 202.153.196.53:80 Flow 181 midstream: tcp 192.168.2.126:58760 -> 202.153.196.53:80 Flow 170 midstream: tcp 192.168.2.126:38314 -> 172.105.121.82:80 Flow 171 midstream: tcp 192.168.2.126:38316 -> 172.105.121.82:80 Flow 169 midstream: tcp 192.168.2.126:38326 -> 172.105.121.82:80 +Flow 134 midstream: tcp 192.168.2.126:41134 -> 129.226.107.77:80 +Flow 163 risky: tcp 192.168.2.126:44368 -> 172.217.18.98:80 +Flow 163 midstream: tcp 192.168.2.126:44368 -> 172.217.18.98:80 Flow 193 midstream: tcp 192.168.2.126:40204 -> 18.235.204.9:80 +Flow 197 midstream: tcp 192.168.2.126:51686 -> 18.64.79.64:80 +Flow 156 midstream: tcp 192.168.2.126:36732 -> 142.250.186.174:80 Flow 155 midstream: tcp 192.168.2.126:38354 -> 142.250.186.34:80 -Flow 157 midstream: tcp 192.168.2.126:49354 -> 14.136.136.108:80 -Flow 159 midstream: tcp 192.168.2.126:49370 -> 14.136.136.108:80 -Flow 162 midstream: tcp 192.168.2.126:49396 -> 14.136.136.108:80 +Flow 141 midstream: tcp 192.168.2.126:46184 -> 172.105.121.82:80 +Flow 143 midstream: tcp 192.168.2.126:46200 -> 172.105.121.82:80 +Flow 144 midstream: tcp 192.168.2.126:46212 -> 172.105.121.82:80 +Flow 173 midstream: tcp 192.168.2.126:56094 -> 3.72.69.158:80 +Flow 175 midstream: tcp 192.168.2.126:56096 -> 3.72.69.158:80 +Flow 174 midstream: tcp 192.168.2.126:56098 -> 3.72.69.158:80 +Flow 176 midstream: tcp 192.168.2.126:56104 -> 3.72.69.158:80 +Flow 145 midstream: tcp 192.168.2.126:35200 -> 103.29.71.30:80 +Flow 147 midstream: tcp 192.168.2.126:45388 -> 161.117.13.29:80 +Flow 148 midstream: tcp 192.168.2.126:45398 -> 161.117.13.29:80 +Flow 149 midstream: tcp 192.168.2.126:45414 -> 161.117.13.29:80 +Flow 151 midstream: tcp 192.168.2.126:45422 -> 161.117.13.29:80 +Flow 152 midstream: tcp 192.168.2.126:45424 -> 161.117.13.29:80 Flow 140 risky: tcp 192.168.2.126:49242 -> 172.104.119.80:80 Flow 140 midstream: tcp 192.168.2.126:49242 -> 172.104.119.80:80 -Flow 161 midstream: tcp 192.168.2.126:49412 -> 14.136.136.108:80 -Flow 179 midstream: tcp 192.168.2.126:43272 -> 18.64.79.58:80 +Flow 194 risky: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 194 midstream: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 133 risky: tcp 192.168.2.126:47230 -> 161.117.13.29:80 +Flow 133 midstream: tcp 192.168.2.126:47230 -> 161.117.13.29:80 +Flow 188 risky: tcp 192.168.2.126:37100 -> 52.29.177.177:80 +Flow 188 midstream: tcp 192.168.2.126:37100 -> 52.29.177.177:80 +Flow 135 midstream: tcp 192.168.2.126:47246 -> 161.117.13.29:80 +Flow 136 midstream: tcp 192.168.2.126:47262 -> 161.117.13.29:80 +Flow 137 midstream: tcp 192.168.2.126:47272 -> 161.117.13.29:80 +Flow 178 risky: tcp 192.168.2.126:56826 -> 8.209.97.107:80 +Flow 178 midstream: tcp 192.168.2.126:56826 -> 8.209.97.107:80 Flow 164 midstream: tcp 192.168.2.126:50140 -> 161.117.13.29:80 Flow 165 midstream: tcp 192.168.2.126:50148 -> 161.117.13.29:80 Flow 166 midstream: tcp 192.168.2.126:50164 -> 161.117.13.29:80 Flow 167 midstream: tcp 192.168.2.126:50166 -> 161.117.13.29:80 Flow 168 midstream: tcp 192.168.2.126:50176 -> 161.117.13.29:80 -Flow 153 risky: tcp 192.168.2.126:41390 -> 18.64.79.37:80 -Flow 153 midstream: tcp 192.168.2.126:41390 -> 18.64.79.37:80 -Flow 197 midstream: tcp 192.168.2.126:51686 -> 18.64.79.64:80 -Flow 156 midstream: tcp 192.168.2.126:36732 -> 142.250.186.174:80 -Flow 194 risky: tcp 192.168.2.126:53416 -> 172.217.16.142:80 -Flow 194 midstream: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 192 midstream: tcp 192.168.2.126:54810 -> 18.233.123.55:80 Flow 189 midstream: tcp 192.168.2.126:42554 -> 35.156.44.13:80 Flow 190 risky: tcp 192.168.2.126:42566 -> 35.156.44.13:80 Flow 190 midstream: tcp 192.168.2.126:42566 -> 35.156.44.13:80 -Flow 195 midstream: tcp 192.168.2.126:33042 -> 3.122.190.70:80 -Flow 173 midstream: tcp 192.168.2.126:56094 -> 3.72.69.158:80 -Flow 175 midstream: tcp 192.168.2.126:56096 -> 3.72.69.158:80 -Flow 174 midstream: tcp 192.168.2.126:56098 -> 3.72.69.158:80 -Flow 176 midstream: tcp 192.168.2.126:56104 -> 3.72.69.158:80 -Flow 134 midstream: tcp 192.168.2.126:41134 -> 129.226.107.77:80 -Flow 130 risky: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 -Flow 130 midstream: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 -Flow 131 risky: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 -Flow 131 midstream: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 -Flow 132 risky: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 -Flow 132 midstream: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 -Flow 196 risky: tcp 192.168.2.126:35426 -> 8.209.112.118:80 -Flow 196 midstream: tcp 192.168.2.126:35426 -> 8.209.112.118:80 -Flow 191 midstream: tcp 192.168.2.126:41940 -> 18.64.79.50:80 -Flow 139 midstream: tcp 192.168.2.126:60148 -> 172.105.121.82:80 -Flow 172 midstream: tcp 192.168.2.126:59324 -> 104.117.221.10:80 Flow 138 risky: tcp 192.168.2.126:38834 -> 119.45.78.184:80 Flow 138 midstream: tcp 192.168.2.126:38834 -> 119.45.78.184:80 +Flow 157 midstream: tcp 192.168.2.126:49354 -> 14.136.136.108:80 +Flow 159 midstream: tcp 192.168.2.126:49370 -> 14.136.136.108:80 +Flow 162 midstream: tcp 192.168.2.126:49396 -> 14.136.136.108:80 +Flow 161 midstream: tcp 192.168.2.126:49412 -> 14.136.136.108:80 Flow 182 midstream: tcp 192.168.2.126:35664 -> 18.66.2.90:80 -Flow 141 midstream: tcp 192.168.2.126:46184 -> 172.105.121.82:80 -Flow 133 risky: tcp 192.168.2.126:47230 -> 161.117.13.29:80 -Flow 133 midstream: tcp 192.168.2.126:47230 -> 161.117.13.29:80 -Flow 188 risky: tcp 192.168.2.126:37100 -> 52.29.177.177:80 -Flow 188 midstream: tcp 192.168.2.126:37100 -> 52.29.177.177:80 -Flow 143 midstream: tcp 192.168.2.126:46200 -> 172.105.121.82:80 -Flow 135 midstream: tcp 192.168.2.126:47246 -> 161.117.13.29:80 -Flow 144 midstream: tcp 192.168.2.126:46212 -> 172.105.121.82:80 -Flow 136 midstream: tcp 192.168.2.126:47262 -> 161.117.13.29:80 -Flow 137 midstream: tcp 192.168.2.126:47272 -> 161.117.13.29:80 -Flow 145 midstream: tcp 192.168.2.126:35200 -> 103.29.71.30:80 +Flow 184 midstream: tcp 192.168.2.126:36636 -> 18.64.103.30:80 +Flow 185 midstream: tcp 192.168.2.126:36640 -> 18.64.103.30:80 +Flow 186 midstream: tcp 192.168.2.126:36654 -> 18.64.103.30:80 +Flow 139 midstream: tcp 192.168.2.126:60148 -> 172.105.121.82:80 diff --git a/test/results/flow-captured/fpc_disabled/teams.pcap.out b/test/results/flow-captured/fpc_disabled/teams.pcap.out index 4e70f518c..88544269b 100644 --- a/test/results/flow-captured/fpc_disabled/teams.pcap.out +++ b/test/results/flow-captured/fpc_disabled/teams.pcap.out @@ -1,9 +1,7 @@ Flow 48 risky: tcp 192.168.1.6:60559 -> 52.114.77.33:443 Flow 64 risky: tcp 192.168.1.6:50018 -> 52.114.250.123:443 Flow 78 risky: udp 93.71.110.205:16332 -> 192.168.1.6:50016 -Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 43 risky: tcp 192.168.1.6:60554 -> 52.113.194.132:443 -Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 4 risky: tcp 192.168.1.6:60532 -> 52.114.77.33:443 Flow 7 risky: tcp 192.168.1.6:60535 -> 52.114.77.33:443 Flow 25 risky: tcp 192.168.1.6:60543 -> 52.114.77.33:443 @@ -11,7 +9,9 @@ Flow 51 risky: tcp 192.168.1.6:60561 -> 52.114.77.33:443 Flow 74 risky: tcp 192.168.1.6:60567 -> 52.114.77.136:443 Flow 60 not-detected: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 Flow 60 midstream: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 -Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 +Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 10 risky: udp 192.168.1.6:64046 -> 192.168.1.1:53 +Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 68 risky: udp 192.168.1.6:50016 -> 52.114.250.141:3478 Flow 70 risky: udp 192.168.1.6:50036 -> 52.114.250.137:3478 +Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 diff --git a/test/results/flow-captured/guess_ip_before_port_enabled/1kxun.pcap.out b/test/results/flow-captured/guess_ip_before_port_enabled/1kxun.pcap.out index 034a664ad..fb82f703b 100644 --- a/test/results/flow-captured/guess_ip_before_port_enabled/1kxun.pcap.out +++ b/test/results/flow-captured/guess_ip_before_port_enabled/1kxun.pcap.out @@ -1,111 +1,111 @@ Flow 37 risky: tcp 192.168.115.8:49606 -> 106.185.35.110:80 Flow 41 risky: tcp 192.168.115.8:49609 -> 42.120.51.152:8080 -Flow 14 risky: udp 192.168.115.8:51024 -> 8.8.8.8:53 -Flow 20 risky: udp 192.168.3.95:58779 -> 224.0.0.252:5355 Flow 19 risky: udp fe80::e98f:bae2:19f7:6b0f:58779 -> ff02::1:3:5355 +Flow 20 risky: udp 192.168.3.95:58779 -> 224.0.0.252:5355 Flow 24 risky: udp 192.168.115.8:52723 -> 168.95.1.1:53 +Flow 14 risky: udp 192.168.115.8:51024 -> 8.8.8.8:53 Flow 16 risky: udp 192.168.115.8:52723 -> 8.8.8.8:53 -Flow 35 risky: udp 192.168.5.67:138 -> 192.168.255.255:138 -Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 39 risky: udp 192.168.115.8:54420 -> 8.8.8.8:53 +Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 26 risky: udp 192.168.115.8:60724 -> 8.8.8.8:53 +Flow 35 risky: udp 192.168.5.67:138 -> 192.168.255.255:138 Flow 33 risky: udp fe80::e98f:bae2:19f7:6b0f:54888 -> ff02::1:3:5355 -Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 -Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 -Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 -Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 -Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 -Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 Flow 38 risky: tcp 192.168.115.8:49607 -> 218.244.135.170:9099 +Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 +Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 Flow 42 not-detected: udp 192.168.10.110:60480 -> 255.255.255.255:62976 -Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 -Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 -Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 +Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 +Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 +Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 +Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 Flow 65 not-detected: udp 192.168.140.140:62976 -> 255.255.255.255:62976 Flow 71 not-detected: udp 192.168.10.7:62976 -> 255.255.255.255:62976 Flow 22 not-detected: udp 192.168.125.30:62976 -> 255.255.255.255:62976 Flow 88 not-detected: udp 192.168.119.1:56861 -> 255.255.255.255:5678 -Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 +Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 +Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 +Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 +Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 +Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 +Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 Flow 46 risky: tcp 192.168.115.8:49612 -> 183.131.48.145:80 Flow 49 risky: tcp 192.168.115.8:49613 -> 183.131.48.144:80 -Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 -Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 -Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 +Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 Flow 86 not-detected: udp 59.120.208.212:32768 -> 255.255.255.255:1947 Flow 142 midstream: tcp 192.168.2.126:46170 -> 172.105.121.82:80 Flow 146 midstream: tcp 192.168.2.126:45380 -> 161.117.13.29:80 Flow 160 midstream: tcp 192.168.2.126:49380 -> 14.136.136.108:80 Flow 158 midstream: tcp 192.168.2.126:49372 -> 14.136.136.108:80 Flow 150 midstream: tcp 192.168.2.126:45416 -> 161.117.13.29:80 -Flow 147 midstream: tcp 192.168.2.126:45388 -> 161.117.13.29:80 -Flow 148 midstream: tcp 192.168.2.126:45398 -> 161.117.13.29:80 -Flow 163 risky: tcp 192.168.2.126:44368 -> 172.217.18.98:80 -Flow 163 midstream: tcp 192.168.2.126:44368 -> 172.217.18.98:80 -Flow 178 risky: tcp 192.168.2.126:56826 -> 8.209.97.107:80 -Flow 178 midstream: tcp 192.168.2.126:56826 -> 8.209.97.107:80 -Flow 149 midstream: tcp 192.168.2.126:45414 -> 161.117.13.29:80 -Flow 151 midstream: tcp 192.168.2.126:45422 -> 161.117.13.29:80 -Flow 152 midstream: tcp 192.168.2.126:45424 -> 161.117.13.29:80 -Flow 192 midstream: tcp 192.168.2.126:54810 -> 18.233.123.55:80 -Flow 184 midstream: tcp 192.168.2.126:36636 -> 18.64.103.30:80 -Flow 185 midstream: tcp 192.168.2.126:36640 -> 18.64.103.30:80 -Flow 186 midstream: tcp 192.168.2.126:36654 -> 18.64.103.30:80 +Flow 130 risky: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 +Flow 130 midstream: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 +Flow 131 risky: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 +Flow 131 midstream: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 +Flow 132 risky: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 +Flow 132 midstream: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 +Flow 196 risky: tcp 192.168.2.126:35426 -> 8.209.112.118:80 +Flow 196 midstream: tcp 192.168.2.126:35426 -> 8.209.112.118:80 +Flow 172 midstream: tcp 192.168.2.126:59324 -> 104.117.221.10:80 +Flow 153 risky: tcp 192.168.2.126:41390 -> 18.64.79.37:80 +Flow 153 midstream: tcp 192.168.2.126:41390 -> 18.64.79.37:80 +Flow 191 midstream: tcp 192.168.2.126:41940 -> 18.64.79.50:80 +Flow 179 midstream: tcp 192.168.2.126:43272 -> 18.64.79.58:80 +Flow 195 midstream: tcp 192.168.2.126:33042 -> 3.122.190.70:80 Flow 180 midstream: tcp 192.168.2.126:58758 -> 202.153.196.53:80 Flow 181 midstream: tcp 192.168.2.126:58760 -> 202.153.196.53:80 Flow 170 midstream: tcp 192.168.2.126:38314 -> 172.105.121.82:80 Flow 171 midstream: tcp 192.168.2.126:38316 -> 172.105.121.82:80 Flow 169 midstream: tcp 192.168.2.126:38326 -> 172.105.121.82:80 +Flow 134 midstream: tcp 192.168.2.126:41134 -> 129.226.107.77:80 +Flow 163 risky: tcp 192.168.2.126:44368 -> 172.217.18.98:80 +Flow 163 midstream: tcp 192.168.2.126:44368 -> 172.217.18.98:80 Flow 193 midstream: tcp 192.168.2.126:40204 -> 18.235.204.9:80 +Flow 197 midstream: tcp 192.168.2.126:51686 -> 18.64.79.64:80 +Flow 156 midstream: tcp 192.168.2.126:36732 -> 142.250.186.174:80 Flow 155 midstream: tcp 192.168.2.126:38354 -> 142.250.186.34:80 -Flow 157 midstream: tcp 192.168.2.126:49354 -> 14.136.136.108:80 -Flow 159 midstream: tcp 192.168.2.126:49370 -> 14.136.136.108:80 -Flow 162 midstream: tcp 192.168.2.126:49396 -> 14.136.136.108:80 +Flow 141 midstream: tcp 192.168.2.126:46184 -> 172.105.121.82:80 +Flow 143 midstream: tcp 192.168.2.126:46200 -> 172.105.121.82:80 +Flow 144 midstream: tcp 192.168.2.126:46212 -> 172.105.121.82:80 +Flow 173 midstream: tcp 192.168.2.126:56094 -> 3.72.69.158:80 +Flow 175 midstream: tcp 192.168.2.126:56096 -> 3.72.69.158:80 +Flow 174 midstream: tcp 192.168.2.126:56098 -> 3.72.69.158:80 +Flow 176 midstream: tcp 192.168.2.126:56104 -> 3.72.69.158:80 +Flow 145 midstream: tcp 192.168.2.126:35200 -> 103.29.71.30:80 +Flow 147 midstream: tcp 192.168.2.126:45388 -> 161.117.13.29:80 +Flow 148 midstream: tcp 192.168.2.126:45398 -> 161.117.13.29:80 +Flow 149 midstream: tcp 192.168.2.126:45414 -> 161.117.13.29:80 +Flow 151 midstream: tcp 192.168.2.126:45422 -> 161.117.13.29:80 +Flow 152 midstream: tcp 192.168.2.126:45424 -> 161.117.13.29:80 Flow 140 risky: tcp 192.168.2.126:49242 -> 172.104.119.80:80 Flow 140 midstream: tcp 192.168.2.126:49242 -> 172.104.119.80:80 -Flow 161 midstream: tcp 192.168.2.126:49412 -> 14.136.136.108:80 -Flow 179 midstream: tcp 192.168.2.126:43272 -> 18.64.79.58:80 +Flow 194 risky: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 194 midstream: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 133 risky: tcp 192.168.2.126:47230 -> 161.117.13.29:80 +Flow 133 midstream: tcp 192.168.2.126:47230 -> 161.117.13.29:80 +Flow 188 risky: tcp 192.168.2.126:37100 -> 52.29.177.177:80 +Flow 188 midstream: tcp 192.168.2.126:37100 -> 52.29.177.177:80 +Flow 135 midstream: tcp 192.168.2.126:47246 -> 161.117.13.29:80 +Flow 136 midstream: tcp 192.168.2.126:47262 -> 161.117.13.29:80 +Flow 137 midstream: tcp 192.168.2.126:47272 -> 161.117.13.29:80 +Flow 178 risky: tcp 192.168.2.126:56826 -> 8.209.97.107:80 +Flow 178 midstream: tcp 192.168.2.126:56826 -> 8.209.97.107:80 Flow 164 midstream: tcp 192.168.2.126:50140 -> 161.117.13.29:80 Flow 165 midstream: tcp 192.168.2.126:50148 -> 161.117.13.29:80 Flow 166 midstream: tcp 192.168.2.126:50164 -> 161.117.13.29:80 Flow 167 midstream: tcp 192.168.2.126:50166 -> 161.117.13.29:80 Flow 168 midstream: tcp 192.168.2.126:50176 -> 161.117.13.29:80 -Flow 153 risky: tcp 192.168.2.126:41390 -> 18.64.79.37:80 -Flow 153 midstream: tcp 192.168.2.126:41390 -> 18.64.79.37:80 -Flow 197 midstream: tcp 192.168.2.126:51686 -> 18.64.79.64:80 -Flow 156 midstream: tcp 192.168.2.126:36732 -> 142.250.186.174:80 -Flow 194 risky: tcp 192.168.2.126:53416 -> 172.217.16.142:80 -Flow 194 midstream: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 192 midstream: tcp 192.168.2.126:54810 -> 18.233.123.55:80 Flow 189 midstream: tcp 192.168.2.126:42554 -> 35.156.44.13:80 Flow 190 risky: tcp 192.168.2.126:42566 -> 35.156.44.13:80 Flow 190 midstream: tcp 192.168.2.126:42566 -> 35.156.44.13:80 -Flow 195 midstream: tcp 192.168.2.126:33042 -> 3.122.190.70:80 -Flow 173 midstream: tcp 192.168.2.126:56094 -> 3.72.69.158:80 -Flow 175 midstream: tcp 192.168.2.126:56096 -> 3.72.69.158:80 -Flow 174 midstream: tcp 192.168.2.126:56098 -> 3.72.69.158:80 -Flow 176 midstream: tcp 192.168.2.126:56104 -> 3.72.69.158:80 -Flow 134 midstream: tcp 192.168.2.126:41134 -> 129.226.107.77:80 -Flow 130 risky: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 -Flow 130 midstream: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 -Flow 131 risky: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 -Flow 131 midstream: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 -Flow 132 risky: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 -Flow 132 midstream: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 -Flow 196 risky: tcp 192.168.2.126:35426 -> 8.209.112.118:80 -Flow 196 midstream: tcp 192.168.2.126:35426 -> 8.209.112.118:80 -Flow 191 midstream: tcp 192.168.2.126:41940 -> 18.64.79.50:80 -Flow 139 midstream: tcp 192.168.2.126:60148 -> 172.105.121.82:80 -Flow 172 midstream: tcp 192.168.2.126:59324 -> 104.117.221.10:80 Flow 138 risky: tcp 192.168.2.126:38834 -> 119.45.78.184:80 Flow 138 midstream: tcp 192.168.2.126:38834 -> 119.45.78.184:80 +Flow 157 midstream: tcp 192.168.2.126:49354 -> 14.136.136.108:80 +Flow 159 midstream: tcp 192.168.2.126:49370 -> 14.136.136.108:80 +Flow 162 midstream: tcp 192.168.2.126:49396 -> 14.136.136.108:80 +Flow 161 midstream: tcp 192.168.2.126:49412 -> 14.136.136.108:80 Flow 182 midstream: tcp 192.168.2.126:35664 -> 18.66.2.90:80 -Flow 141 midstream: tcp 192.168.2.126:46184 -> 172.105.121.82:80 -Flow 133 risky: tcp 192.168.2.126:47230 -> 161.117.13.29:80 -Flow 133 midstream: tcp 192.168.2.126:47230 -> 161.117.13.29:80 -Flow 188 risky: tcp 192.168.2.126:37100 -> 52.29.177.177:80 -Flow 188 midstream: tcp 192.168.2.126:37100 -> 52.29.177.177:80 -Flow 143 midstream: tcp 192.168.2.126:46200 -> 172.105.121.82:80 -Flow 135 midstream: tcp 192.168.2.126:47246 -> 161.117.13.29:80 -Flow 144 midstream: tcp 192.168.2.126:46212 -> 172.105.121.82:80 -Flow 136 midstream: tcp 192.168.2.126:47262 -> 161.117.13.29:80 -Flow 137 midstream: tcp 192.168.2.126:47272 -> 161.117.13.29:80 -Flow 145 midstream: tcp 192.168.2.126:35200 -> 103.29.71.30:80 +Flow 184 midstream: tcp 192.168.2.126:36636 -> 18.64.103.30:80 +Flow 185 midstream: tcp 192.168.2.126:36640 -> 18.64.103.30:80 +Flow 186 midstream: tcp 192.168.2.126:36654 -> 18.64.103.30:80 +Flow 139 midstream: tcp 192.168.2.126:60148 -> 172.105.121.82:80 diff --git a/test/results/flow-captured/guessing_disable/webex.pcap.out b/test/results/flow-captured/guessing_disable/webex.pcap.out index 33650debc..4ebbd9fb9 100644 --- a/test/results/flow-captured/guessing_disable/webex.pcap.out +++ b/test/results/flow-captured/guessing_disable/webex.pcap.out @@ -1,9 +1,9 @@ Flow 45 risky: tcp 10.8.0.1:59756 -> 78.46.237.91:80 Flow 46 risky: tcp 10.8.0.1:59757 -> 78.46.237.91:80 -Flow 52 risky: tcp 10.8.0.1:51857 -> 62.109.229.158:443 -Flow 33 midstream: tcp 10.133.206.47:33459 -> 80.74.110.68:443 Flow 36 risky: tcp 10.8.0.1:51154 -> 62.109.224.120:443 Flow 37 risky: tcp 10.8.0.1:51155 -> 62.109.224.120:443 +Flow 52 risky: tcp 10.8.0.1:51857 -> 62.109.229.158:443 +Flow 33 midstream: tcp 10.133.206.47:33459 -> 80.74.110.68:443 Flow 1 risky: tcp 10.8.0.1:41346 -> 64.68.105.103:443 Flow 2 risky: tcp 10.8.0.1:41348 -> 64.68.105.103:443 Flow 9 risky: tcp 10.8.0.1:41358 -> 64.68.105.103:443 diff --git a/test/results/flow-captured/http_process_response_disable/http_asymmetric.pcapng.out b/test/results/flow-captured/http_process_response_disable/http_asymmetric.pcapng.out index e72b81357..a50ff57bf 100644 --- a/test/results/flow-captured/http_process_response_disable/http_asymmetric.pcapng.out +++ b/test/results/flow-captured/http_process_response_disable/http_asymmetric.pcapng.out @@ -1,2 +1,2 @@ -Flow 2 risky: tcp 192.168.1.146:80 -> 192.168.1.103:1044 Flow 1 risky: tcp 192.168.0.1:1044 -> 10.10.10.1:80 +Flow 2 risky: tcp 192.168.1.146:80 -> 192.168.1.103:1044 diff --git a/test/results/flow-captured/ip_lists_disable/1kxun.pcap.out b/test/results/flow-captured/ip_lists_disable/1kxun.pcap.out index 034a664ad..fb82f703b 100644 --- a/test/results/flow-captured/ip_lists_disable/1kxun.pcap.out +++ b/test/results/flow-captured/ip_lists_disable/1kxun.pcap.out @@ -1,111 +1,111 @@ Flow 37 risky: tcp 192.168.115.8:49606 -> 106.185.35.110:80 Flow 41 risky: tcp 192.168.115.8:49609 -> 42.120.51.152:8080 -Flow 14 risky: udp 192.168.115.8:51024 -> 8.8.8.8:53 -Flow 20 risky: udp 192.168.3.95:58779 -> 224.0.0.252:5355 Flow 19 risky: udp fe80::e98f:bae2:19f7:6b0f:58779 -> ff02::1:3:5355 +Flow 20 risky: udp 192.168.3.95:58779 -> 224.0.0.252:5355 Flow 24 risky: udp 192.168.115.8:52723 -> 168.95.1.1:53 +Flow 14 risky: udp 192.168.115.8:51024 -> 8.8.8.8:53 Flow 16 risky: udp 192.168.115.8:52723 -> 8.8.8.8:53 -Flow 35 risky: udp 192.168.5.67:138 -> 192.168.255.255:138 -Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 39 risky: udp 192.168.115.8:54420 -> 8.8.8.8:53 +Flow 34 risky: udp 192.168.3.95:54888 -> 224.0.0.252:5355 Flow 26 risky: udp 192.168.115.8:60724 -> 8.8.8.8:53 +Flow 35 risky: udp 192.168.5.67:138 -> 192.168.255.255:138 Flow 33 risky: udp fe80::e98f:bae2:19f7:6b0f:54888 -> ff02::1:3:5355 -Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 -Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 -Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 -Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 -Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 -Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 Flow 38 risky: tcp 192.168.115.8:49607 -> 218.244.135.170:9099 +Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 +Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 Flow 42 not-detected: udp 192.168.10.110:60480 -> 255.255.255.255:62976 -Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 -Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 -Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 +Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 +Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 +Flow 66 not-detected: udp 2001:b020:6::c2a0:bbff:fe73:eb57:62976 -> ff02::1:62976 +Flow 23 not-detected: udp 2001:b030:214:100:c2a0:bbff:fe73:eb47:62976 -> ff02::1:62976 Flow 65 not-detected: udp 192.168.140.140:62976 -> 255.255.255.255:62976 Flow 71 not-detected: udp 192.168.10.7:62976 -> 255.255.255.255:62976 Flow 22 not-detected: udp 192.168.125.30:62976 -> 255.255.255.255:62976 Flow 88 not-detected: udp 192.168.119.1:56861 -> 255.255.255.255:5678 -Flow 79 not-detected: udp 192.168.0.100:50925 -> 255.255.255.255:5678 +Flow 36 risky: tcp 192.168.115.8:49605 -> 106.185.35.110:80 +Flow 77 not-detected: udp 192.168.2.186:32768 -> 255.255.255.255:1947 +Flow 56 not-detected: udp 59.120.208.218:50151 -> 255.255.255.255:1947 +Flow 70 risky: udp 192.168.5.45:138 -> 192.168.255.255:138 +Flow 59 risky: tcp 192.168.5.16:53624 -> 68.233.253.133:80 +Flow 94 not-detected: udp 192.168.119.2:43786 -> 255.255.255.255:5678 Flow 46 risky: tcp 192.168.115.8:49612 -> 183.131.48.145:80 Flow 49 risky: tcp 192.168.115.8:49613 -> 183.131.48.144:80 -Flow 89 not-detected: udp fe80::4e5e:cff:feea:365:5678 -> ff02::1:5678 -Flow 60 not-detected: udp fe80::4e5e:cff:fe9a:ec54:5678 -> ff02::1:5678 -Flow 98 risky: udp 192.168.3.95:51451 -> 224.0.0.252:5355 +Flow 97 risky: udp fe80::e98f:bae2:19f7:6b0f:51451 -> ff02::1:3:5355 Flow 86 not-detected: udp 59.120.208.212:32768 -> 255.255.255.255:1947 Flow 142 midstream: tcp 192.168.2.126:46170 -> 172.105.121.82:80 Flow 146 midstream: tcp 192.168.2.126:45380 -> 161.117.13.29:80 Flow 160 midstream: tcp 192.168.2.126:49380 -> 14.136.136.108:80 Flow 158 midstream: tcp 192.168.2.126:49372 -> 14.136.136.108:80 Flow 150 midstream: tcp 192.168.2.126:45416 -> 161.117.13.29:80 -Flow 147 midstream: tcp 192.168.2.126:45388 -> 161.117.13.29:80 -Flow 148 midstream: tcp 192.168.2.126:45398 -> 161.117.13.29:80 -Flow 163 risky: tcp 192.168.2.126:44368 -> 172.217.18.98:80 -Flow 163 midstream: tcp 192.168.2.126:44368 -> 172.217.18.98:80 -Flow 178 risky: tcp 192.168.2.126:56826 -> 8.209.97.107:80 -Flow 178 midstream: tcp 192.168.2.126:56826 -> 8.209.97.107:80 -Flow 149 midstream: tcp 192.168.2.126:45414 -> 161.117.13.29:80 -Flow 151 midstream: tcp 192.168.2.126:45422 -> 161.117.13.29:80 -Flow 152 midstream: tcp 192.168.2.126:45424 -> 161.117.13.29:80 -Flow 192 midstream: tcp 192.168.2.126:54810 -> 18.233.123.55:80 -Flow 184 midstream: tcp 192.168.2.126:36636 -> 18.64.103.30:80 -Flow 185 midstream: tcp 192.168.2.126:36640 -> 18.64.103.30:80 -Flow 186 midstream: tcp 192.168.2.126:36654 -> 18.64.103.30:80 +Flow 130 risky: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 +Flow 130 midstream: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 +Flow 131 risky: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 +Flow 131 midstream: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 +Flow 132 risky: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 +Flow 132 midstream: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 +Flow 196 risky: tcp 192.168.2.126:35426 -> 8.209.112.118:80 +Flow 196 midstream: tcp 192.168.2.126:35426 -> 8.209.112.118:80 +Flow 172 midstream: tcp 192.168.2.126:59324 -> 104.117.221.10:80 +Flow 153 risky: tcp 192.168.2.126:41390 -> 18.64.79.37:80 +Flow 153 midstream: tcp 192.168.2.126:41390 -> 18.64.79.37:80 +Flow 191 midstream: tcp 192.168.2.126:41940 -> 18.64.79.50:80 +Flow 179 midstream: tcp 192.168.2.126:43272 -> 18.64.79.58:80 +Flow 195 midstream: tcp 192.168.2.126:33042 -> 3.122.190.70:80 Flow 180 midstream: tcp 192.168.2.126:58758 -> 202.153.196.53:80 Flow 181 midstream: tcp 192.168.2.126:58760 -> 202.153.196.53:80 Flow 170 midstream: tcp 192.168.2.126:38314 -> 172.105.121.82:80 Flow 171 midstream: tcp 192.168.2.126:38316 -> 172.105.121.82:80 Flow 169 midstream: tcp 192.168.2.126:38326 -> 172.105.121.82:80 +Flow 134 midstream: tcp 192.168.2.126:41134 -> 129.226.107.77:80 +Flow 163 risky: tcp 192.168.2.126:44368 -> 172.217.18.98:80 +Flow 163 midstream: tcp 192.168.2.126:44368 -> 172.217.18.98:80 Flow 193 midstream: tcp 192.168.2.126:40204 -> 18.235.204.9:80 +Flow 197 midstream: tcp 192.168.2.126:51686 -> 18.64.79.64:80 +Flow 156 midstream: tcp 192.168.2.126:36732 -> 142.250.186.174:80 Flow 155 midstream: tcp 192.168.2.126:38354 -> 142.250.186.34:80 -Flow 157 midstream: tcp 192.168.2.126:49354 -> 14.136.136.108:80 -Flow 159 midstream: tcp 192.168.2.126:49370 -> 14.136.136.108:80 -Flow 162 midstream: tcp 192.168.2.126:49396 -> 14.136.136.108:80 +Flow 141 midstream: tcp 192.168.2.126:46184 -> 172.105.121.82:80 +Flow 143 midstream: tcp 192.168.2.126:46200 -> 172.105.121.82:80 +Flow 144 midstream: tcp 192.168.2.126:46212 -> 172.105.121.82:80 +Flow 173 midstream: tcp 192.168.2.126:56094 -> 3.72.69.158:80 +Flow 175 midstream: tcp 192.168.2.126:56096 -> 3.72.69.158:80 +Flow 174 midstream: tcp 192.168.2.126:56098 -> 3.72.69.158:80 +Flow 176 midstream: tcp 192.168.2.126:56104 -> 3.72.69.158:80 +Flow 145 midstream: tcp 192.168.2.126:35200 -> 103.29.71.30:80 +Flow 147 midstream: tcp 192.168.2.126:45388 -> 161.117.13.29:80 +Flow 148 midstream: tcp 192.168.2.126:45398 -> 161.117.13.29:80 +Flow 149 midstream: tcp 192.168.2.126:45414 -> 161.117.13.29:80 +Flow 151 midstream: tcp 192.168.2.126:45422 -> 161.117.13.29:80 +Flow 152 midstream: tcp 192.168.2.126:45424 -> 161.117.13.29:80 Flow 140 risky: tcp 192.168.2.126:49242 -> 172.104.119.80:80 Flow 140 midstream: tcp 192.168.2.126:49242 -> 172.104.119.80:80 -Flow 161 midstream: tcp 192.168.2.126:49412 -> 14.136.136.108:80 -Flow 179 midstream: tcp 192.168.2.126:43272 -> 18.64.79.58:80 +Flow 194 risky: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 194 midstream: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 133 risky: tcp 192.168.2.126:47230 -> 161.117.13.29:80 +Flow 133 midstream: tcp 192.168.2.126:47230 -> 161.117.13.29:80 +Flow 188 risky: tcp 192.168.2.126:37100 -> 52.29.177.177:80 +Flow 188 midstream: tcp 192.168.2.126:37100 -> 52.29.177.177:80 +Flow 135 midstream: tcp 192.168.2.126:47246 -> 161.117.13.29:80 +Flow 136 midstream: tcp 192.168.2.126:47262 -> 161.117.13.29:80 +Flow 137 midstream: tcp 192.168.2.126:47272 -> 161.117.13.29:80 +Flow 178 risky: tcp 192.168.2.126:56826 -> 8.209.97.107:80 +Flow 178 midstream: tcp 192.168.2.126:56826 -> 8.209.97.107:80 Flow 164 midstream: tcp 192.168.2.126:50140 -> 161.117.13.29:80 Flow 165 midstream: tcp 192.168.2.126:50148 -> 161.117.13.29:80 Flow 166 midstream: tcp 192.168.2.126:50164 -> 161.117.13.29:80 Flow 167 midstream: tcp 192.168.2.126:50166 -> 161.117.13.29:80 Flow 168 midstream: tcp 192.168.2.126:50176 -> 161.117.13.29:80 -Flow 153 risky: tcp 192.168.2.126:41390 -> 18.64.79.37:80 -Flow 153 midstream: tcp 192.168.2.126:41390 -> 18.64.79.37:80 -Flow 197 midstream: tcp 192.168.2.126:51686 -> 18.64.79.64:80 -Flow 156 midstream: tcp 192.168.2.126:36732 -> 142.250.186.174:80 -Flow 194 risky: tcp 192.168.2.126:53416 -> 172.217.16.142:80 -Flow 194 midstream: tcp 192.168.2.126:53416 -> 172.217.16.142:80 +Flow 192 midstream: tcp 192.168.2.126:54810 -> 18.233.123.55:80 Flow 189 midstream: tcp 192.168.2.126:42554 -> 35.156.44.13:80 Flow 190 risky: tcp 192.168.2.126:42566 -> 35.156.44.13:80 Flow 190 midstream: tcp 192.168.2.126:42566 -> 35.156.44.13:80 -Flow 195 midstream: tcp 192.168.2.126:33042 -> 3.122.190.70:80 -Flow 173 midstream: tcp 192.168.2.126:56094 -> 3.72.69.158:80 -Flow 175 midstream: tcp 192.168.2.126:56096 -> 3.72.69.158:80 -Flow 174 midstream: tcp 192.168.2.126:56098 -> 3.72.69.158:80 -Flow 176 midstream: tcp 192.168.2.126:56104 -> 3.72.69.158:80 -Flow 134 midstream: tcp 192.168.2.126:41134 -> 129.226.107.77:80 -Flow 130 risky: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 -Flow 130 midstream: tcp 192.168.2.126:60962 -> 172.104.93.92:1234 -Flow 131 risky: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 -Flow 131 midstream: tcp 192.168.2.126:60972 -> 172.104.93.92:1234 -Flow 132 risky: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 -Flow 132 midstream: tcp 192.168.2.126:60984 -> 172.104.93.92:1234 -Flow 196 risky: tcp 192.168.2.126:35426 -> 8.209.112.118:80 -Flow 196 midstream: tcp 192.168.2.126:35426 -> 8.209.112.118:80 -Flow 191 midstream: tcp 192.168.2.126:41940 -> 18.64.79.50:80 -Flow 139 midstream: tcp 192.168.2.126:60148 -> 172.105.121.82:80 -Flow 172 midstream: tcp 192.168.2.126:59324 -> 104.117.221.10:80 Flow 138 risky: tcp 192.168.2.126:38834 -> 119.45.78.184:80 Flow 138 midstream: tcp 192.168.2.126:38834 -> 119.45.78.184:80 +Flow 157 midstream: tcp 192.168.2.126:49354 -> 14.136.136.108:80 +Flow 159 midstream: tcp 192.168.2.126:49370 -> 14.136.136.108:80 +Flow 162 midstream: tcp 192.168.2.126:49396 -> 14.136.136.108:80 +Flow 161 midstream: tcp 192.168.2.126:49412 -> 14.136.136.108:80 Flow 182 midstream: tcp 192.168.2.126:35664 -> 18.66.2.90:80 -Flow 141 midstream: tcp 192.168.2.126:46184 -> 172.105.121.82:80 -Flow 133 risky: tcp 192.168.2.126:47230 -> 161.117.13.29:80 -Flow 133 midstream: tcp 192.168.2.126:47230 -> 161.117.13.29:80 -Flow 188 risky: tcp 192.168.2.126:37100 -> 52.29.177.177:80 -Flow 188 midstream: tcp 192.168.2.126:37100 -> 52.29.177.177:80 -Flow 143 midstream: tcp 192.168.2.126:46200 -> 172.105.121.82:80 -Flow 135 midstream: tcp 192.168.2.126:47246 -> 161.117.13.29:80 -Flow 144 midstream: tcp 192.168.2.126:46212 -> 172.105.121.82:80 -Flow 136 midstream: tcp 192.168.2.126:47262 -> 161.117.13.29:80 -Flow 137 midstream: tcp 192.168.2.126:47272 -> 161.117.13.29:80 -Flow 145 midstream: tcp 192.168.2.126:35200 -> 103.29.71.30:80 +Flow 184 midstream: tcp 192.168.2.126:36636 -> 18.64.103.30:80 +Flow 185 midstream: tcp 192.168.2.126:36640 -> 18.64.103.30:80 +Flow 186 midstream: tcp 192.168.2.126:36654 -> 18.64.103.30:80 +Flow 139 midstream: tcp 192.168.2.126:60148 -> 172.105.121.82:80 diff --git a/test/results/flow-captured/monitoring/stun.pcap.out b/test/results/flow-captured/monitoring/stun.pcap.out index 19e9b46e3..9752d2d8d 100644 --- a/test/results/flow-captured/monitoring/stun.pcap.out +++ b/test/results/flow-captured/monitoring/stun.pcap.out @@ -1,3 +1,3 @@ -Flow 2 risky: udp 192.168.12.169:43016 -> 74.125.247.128:3478 Flow 3 risky: icmp 192.168.12.169 -> 74.125.247.128 +Flow 2 risky: udp 192.168.12.169:43016 -> 74.125.247.128:3478 Flow 5 risky: udp 192.168.12.169:38123 -> 31.13.86.54:40003 diff --git a/test/results/flow-captured/monitoring/stun_google_meet.pcapng.out b/test/results/flow-captured/monitoring/stun_google_meet.pcapng.out index d406e6c37..02e818397 100644 --- a/test/results/flow-captured/monitoring/stun_google_meet.pcapng.out +++ b/test/results/flow-captured/monitoring/stun_google_meet.pcapng.out @@ -1,4 +1,4 @@ Flow 3 risky: udp 192.168.12.156:38152 -> 142.250.82.76:19305 -Flow 2 risky: udp 192.168.12.156:45400 -> 74.125.128.127:19302 Flow 1 risky: udp 192.168.12.156:38152 -> 74.125.128.127:19302 +Flow 2 risky: udp 192.168.12.156:45400 -> 74.125.128.127:19302 Flow 7 risky: udp 2001:b07:a3d:c112:48a1:1094:1227:281e:45572 -> 2001:4860:4864:6::81:19305 diff --git a/test/results/flow-captured/monitoring/stun_signal.pcapng.out b/test/results/flow-captured/monitoring/stun_signal.pcapng.out index cf96af8df..7a30a2de8 100644 --- a/test/results/flow-captured/monitoring/stun_signal.pcapng.out +++ b/test/results/flow-captured/monitoring/stun_signal.pcapng.out @@ -3,14 +3,14 @@ Flow 7 risky: icmp 35.158.183.167 -> 192.168.12.169 Flow 3 risky: udp 192.168.12.169:47204 -> 35.158.183.167:443 Flow 6 risky: udp 192.168.12.169:39518 -> 35.158.183.167:443 Flow 23 risky: udp 192.168.12.169:47767 -> 18.195.131.143:61498 -Flow 9 risky: udp 192.168.12.169:43068 -> 35.158.183.167:443 +Flow 11 risky: udp 192.168.12.169:39950 -> 172.253.121.127:19302 Flow 10 risky: udp 192.168.12.169:43068 -> 172.253.121.127:19302 Flow 12 risky: udp 192.168.12.169:39950 -> 35.158.183.167:443 -Flow 11 risky: udp 192.168.12.169:39950 -> 172.253.121.127:19302 -Flow 20 risky: udp 192.168.12.169:37970 -> 35.158.122.211:3478 +Flow 9 risky: udp 192.168.12.169:43068 -> 35.158.183.167:443 Flow 17 risky: udp 192.168.12.169:47767 -> 35.158.122.211:443 -Flow 15 risky: udp 192.168.12.169:47767 -> 172.253.121.127:19302 -Flow 18 risky: udp 192.168.12.169:37970 -> 35.158.122.211:443 Flow 16 risky: udp 192.168.12.169:37970 -> 172.253.121.127:19302 -Flow 21 risky: icmp 35.158.122.211 -> 192.168.12.169 Flow 19 risky: udp 192.168.12.169:47767 -> 35.158.122.211:3478 +Flow 15 risky: udp 192.168.12.169:47767 -> 172.253.121.127:19302 +Flow 21 risky: icmp 35.158.122.211 -> 192.168.12.169 +Flow 18 risky: udp 192.168.12.169:37970 -> 35.158.122.211:443 +Flow 20 risky: udp 192.168.12.169:37970 -> 35.158.122.211:3478 diff --git a/test/results/flow-captured/monitoring/stun_wa_call.pcapng.out b/test/results/flow-captured/monitoring/stun_wa_call.pcapng.out index 0d1b98afe..dc9da1022 100644 --- a/test/results/flow-captured/monitoring/stun_wa_call.pcapng.out +++ b/test/results/flow-captured/monitoring/stun_wa_call.pcapng.out @@ -4,6 +4,6 @@ Flow 2 risky: udp 192.168.12.156:46652 -> 157.240.203.62:3478 Flow 4 risky: udp 192.168.12.156:46652 -> 157.240.21.51:3478 Flow 5 risky: udp 192.168.12.156:46652 -> 157.240.195.48:3478 Flow 3 risky: udp 192.168.12.156:46652 -> 157.240.231.62:3478 -Flow 13 risky: icmp 93.63.100.129 -> 192.168.12.156 -Flow 11 risky: udp 192.168.12.156:49526 -> 10.82.40.241:40436 Flow 12 risky: udp 192.168.12.156:49526 -> 93.33.118.87:41107 +Flow 11 risky: udp 192.168.12.156:49526 -> 10.82.40.241:40436 +Flow 13 risky: icmp 93.63.100.129 -> 192.168.12.156 diff --git a/test/results/flow-captured/monitoring/teams.pcap.out b/test/results/flow-captured/monitoring/teams.pcap.out index 4e70f518c..88544269b 100644 --- a/test/results/flow-captured/monitoring/teams.pcap.out +++ b/test/results/flow-captured/monitoring/teams.pcap.out @@ -1,9 +1,7 @@ Flow 48 risky: tcp 192.168.1.6:60559 -> 52.114.77.33:443 Flow 64 risky: tcp 192.168.1.6:50018 -> 52.114.250.123:443 Flow 78 risky: udp 93.71.110.205:16332 -> 192.168.1.6:50016 -Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 43 risky: tcp 192.168.1.6:60554 -> 52.113.194.132:443 -Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 4 risky: tcp 192.168.1.6:60532 -> 52.114.77.33:443 Flow 7 risky: tcp 192.168.1.6:60535 -> 52.114.77.33:443 Flow 25 risky: tcp 192.168.1.6:60543 -> 52.114.77.33:443 @@ -11,7 +9,9 @@ Flow 51 risky: tcp 192.168.1.6:60561 -> 52.114.77.33:443 Flow 74 risky: tcp 192.168.1.6:60567 -> 52.114.77.136:443 Flow 60 not-detected: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 Flow 60 midstream: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 -Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 +Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 10 risky: udp 192.168.1.6:64046 -> 192.168.1.1:53 +Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 68 risky: udp 192.168.1.6:50016 -> 52.114.250.141:3478 Flow 70 risky: udp 192.168.1.6:50036 -> 52.114.250.137:3478 +Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 diff --git a/test/results/flow-captured/monitoring/telegram_videocall.pcapng.out b/test/results/flow-captured/monitoring/telegram_videocall.pcapng.out index f94ea0087..099594be4 100644 --- a/test/results/flow-captured/monitoring/telegram_videocall.pcapng.out +++ b/test/results/flow-captured/monitoring/telegram_videocall.pcapng.out @@ -2,16 +2,16 @@ Flow 4 risky: tcp 192.168.12.169:37950 -> 149.154.167.91:443 Flow 7 risky: tcp 192.168.12.169:40830 -> 149.154.167.222:443 Flow 26 risky: udp 192.168.12.169:42405 -> 93.36.13.115:35393 Flow 8 risky: tcp 192.168.12.169:40832 -> 149.154.167.222:443 -Flow 10 risky: tcp 192.168.12.169:37966 -> 149.154.167.91:443 -Flow 18 risky: udp 192.168.12.169:40643 -> 91.108.9.35:1400 -Flow 24 risky: udp 192.168.12.169:42405 -> 10.46.103.200:42554 -Flow 5 risky: tcp 192.168.12.169:46862 -> 149.154.167.51:443 -Flow 6 risky: tcp 192.168.12.169:46866 -> 149.154.167.51:443 -Flow 9 risky: tcp 192.168.12.169:40834 -> 149.154.167.222:443 -Flow 19 risky: udp 192.168.12.169:49667 -> 91.108.13.23:1400 -Flow 25 risky: udp 192.168.12.169:40906 -> 10.46.103.200:42554 -Flow 20 risky: udp 192.168.12.169:49780 -> 91.108.17.2:1400 +Flow 34 midstream: tcp 18.195.162.93:443 -> 192.168.12.169:38956 Flow 33 risky: icmp 192.168.12.169 -> 91.108.17.2 Flow 32 risky: icmp 192.168.12.169 -> 91.108.13.23 Flow 31 risky: icmp 192.168.12.169 -> 91.108.9.35 -Flow 34 midstream: tcp 18.195.162.93:443 -> 192.168.12.169:38956 +Flow 25 risky: udp 192.168.12.169:40906 -> 10.46.103.200:42554 +Flow 24 risky: udp 192.168.12.169:42405 -> 10.46.103.200:42554 +Flow 18 risky: udp 192.168.12.169:40643 -> 91.108.9.35:1400 +Flow 10 risky: tcp 192.168.12.169:37966 -> 149.154.167.91:443 +Flow 19 risky: udp 192.168.12.169:49667 -> 91.108.13.23:1400 +Flow 20 risky: udp 192.168.12.169:49780 -> 91.108.17.2:1400 +Flow 9 risky: tcp 192.168.12.169:40834 -> 149.154.167.222:443 +Flow 5 risky: tcp 192.168.12.169:46862 -> 149.154.167.51:443 +Flow 6 risky: tcp 192.168.12.169:46866 -> 149.154.167.51:443 diff --git a/test/results/flow-captured/openvpn_heuristic_enabled/openvpn_obfuscated.pcapng.out b/test/results/flow-captured/openvpn_heuristic_enabled/openvpn_obfuscated.pcapng.out index 073dd5a71..e8c38bf29 100644 --- a/test/results/flow-captured/openvpn_heuristic_enabled/openvpn_obfuscated.pcapng.out +++ b/test/results/flow-captured/openvpn_heuristic_enabled/openvpn_obfuscated.pcapng.out @@ -1,4 +1,4 @@ -Flow 1 guessed: tcp 192.168.12.156:37976 -> 185.128.25.99:465 -Flow 1 not-detected: tcp 192.168.12.156:37976 -> 185.128.25.99:465 Flow 3 guessed: tcp 107.161.86.131:443 -> 192.168.12.156:48072 Flow 3 not-detected: tcp 107.161.86.131:443 -> 192.168.12.156:48072 +Flow 1 guessed: tcp 192.168.12.156:37976 -> 185.128.25.99:465 +Flow 1 not-detected: tcp 192.168.12.156:37976 -> 185.128.25.99:465 diff --git a/test/results/flow-captured/stun_all_attributes_disabled/teams.pcap.out b/test/results/flow-captured/stun_all_attributes_disabled/teams.pcap.out index 4e70f518c..88544269b 100644 --- a/test/results/flow-captured/stun_all_attributes_disabled/teams.pcap.out +++ b/test/results/flow-captured/stun_all_attributes_disabled/teams.pcap.out @@ -1,9 +1,7 @@ Flow 48 risky: tcp 192.168.1.6:60559 -> 52.114.77.33:443 Flow 64 risky: tcp 192.168.1.6:50018 -> 52.114.250.123:443 Flow 78 risky: udp 93.71.110.205:16332 -> 192.168.1.6:50016 -Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 43 risky: tcp 192.168.1.6:60554 -> 52.113.194.132:443 -Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 4 risky: tcp 192.168.1.6:60532 -> 52.114.77.33:443 Flow 7 risky: tcp 192.168.1.6:60535 -> 52.114.77.33:443 Flow 25 risky: tcp 192.168.1.6:60543 -> 52.114.77.33:443 @@ -11,7 +9,9 @@ Flow 51 risky: tcp 192.168.1.6:60561 -> 52.114.77.33:443 Flow 74 risky: tcp 192.168.1.6:60567 -> 52.114.77.136:443 Flow 60 not-detected: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 Flow 60 midstream: tcp 151.11.50.139:2222 -> 192.168.1.6:54750 -Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 +Flow 36 risky: udp 192.168.1.6:61245 -> 192.168.1.1:53 Flow 10 risky: udp 192.168.1.6:64046 -> 192.168.1.1:53 +Flow 67 risky: tcp 192.168.1.6:50021 -> 52.114.250.123:443 Flow 68 risky: udp 192.168.1.6:50016 -> 52.114.250.141:3478 Flow 70 risky: udp 192.168.1.6:50036 -> 52.114.250.137:3478 +Flow 79 risky: udp 93.71.110.205:16333 -> 192.168.1.6:50036 diff --git a/test/results/flow-captured/stun_extra_dissection/lru_ipv6_caches.pcapng.out b/test/results/flow-captured/stun_extra_dissection/lru_ipv6_caches.pcapng.out index 0247c3886..3756595b8 100644 --- a/test/results/flow-captured/stun_extra_dissection/lru_ipv6_caches.pcapng.out +++ b/test/results/flow-captured/stun_extra_dissection/lru_ipv6_caches.pcapng.out @@ -1,4 +1,4 @@ -Flow 2 risky: udp 3991:72d:336e:65ec:c5bf:a5fa:83ad:23de:6881 -> 3024:e5ee:ac2f:cd76:5dd6:a7a1:f17f:5c27:60506 Flow 7 risky: udp 2118:ec33:112b:7908:2c80:27ff:fef7:d71f:48415 -> 32fb:f967:681e:e96b:face:b00c::74fd:3478 Flow 12 risky: udp 3069:c624:1d42:9469:98b1:67ff:fe43:325:56131 -> 32fb:f967:681e:e96b:face:b00c::74fd:3478 Flow 3 risky: udp 2a2f:8509:1cb2:466d:ecbf:69d6:109c:608:62229 -> 3991:72d:336e:65ec:c5bf:a5fa:83ad:23de:6881 +Flow 2 risky: udp 3991:72d:336e:65ec:c5bf:a5fa:83ad:23de:6881 -> 3024:e5ee:ac2f:cd76:5dd6:a7a1:f17f:5c27:60506 diff --git a/test/results/flow-captured/stun_extra_dissection/stun_dtls_rtp_unidir.pcapng.out b/test/results/flow-captured/stun_extra_dissection/stun_dtls_rtp_unidir.pcapng.out index d234da29e..f76511d6a 100644 --- a/test/results/flow-captured/stun_extra_dissection/stun_dtls_rtp_unidir.pcapng.out +++ b/test/results/flow-captured/stun_extra_dissection/stun_dtls_rtp_unidir.pcapng.out @@ -1,2 +1,2 @@ -Flow 1 risky: udp 10.10.0.1:65226 -> 10.1.0.3:57730 Flow 2 risky: udp 10.1.0.3:5853 -> 10.10.0.1:2808 +Flow 1 risky: udp 10.10.0.1:65226 -> 10.1.0.3:57730 diff --git a/test/results/flow-captured/stun_only_peer_address_enabled/stun_wa_call.pcapng.out b/test/results/flow-captured/stun_only_peer_address_enabled/stun_wa_call.pcapng.out index 0d1b98afe..dc9da1022 100644 --- a/test/results/flow-captured/stun_only_peer_address_enabled/stun_wa_call.pcapng.out +++ b/test/results/flow-captured/stun_only_peer_address_enabled/stun_wa_call.pcapng.out @@ -4,6 +4,6 @@ Flow 2 risky: udp 192.168.12.156:46652 -> 157.240.203.62:3478 Flow 4 risky: udp 192.168.12.156:46652 -> 157.240.21.51:3478 Flow 5 risky: udp 192.168.12.156:46652 -> 157.240.195.48:3478 Flow 3 risky: udp 192.168.12.156:46652 -> 157.240.231.62:3478 -Flow 13 risky: icmp 93.63.100.129 -> 192.168.12.156 -Flow 11 risky: udp 192.168.12.156:49526 -> 10.82.40.241:40436 Flow 12 risky: udp 192.168.12.156:49526 -> 93.33.118.87:41107 +Flow 11 risky: udp 192.168.12.156:49526 -> 10.82.40.241:40436 +Flow 13 risky: icmp 93.63.100.129 -> 192.168.12.156 diff --git a/test/results/flow-captured/stun_only_peer_address_enabled/telegram_videocall.pcapng.out b/test/results/flow-captured/stun_only_peer_address_enabled/telegram_videocall.pcapng.out index f94ea0087..099594be4 100644 --- a/test/results/flow-captured/stun_only_peer_address_enabled/telegram_videocall.pcapng.out +++ b/test/results/flow-captured/stun_only_peer_address_enabled/telegram_videocall.pcapng.out @@ -2,16 +2,16 @@ Flow 4 risky: tcp 192.168.12.169:37950 -> 149.154.167.91:443 Flow 7 risky: tcp 192.168.12.169:40830 -> 149.154.167.222:443 Flow 26 risky: udp 192.168.12.169:42405 -> 93.36.13.115:35393 Flow 8 risky: tcp 192.168.12.169:40832 -> 149.154.167.222:443 -Flow 10 risky: tcp 192.168.12.169:37966 -> 149.154.167.91:443 -Flow 18 risky: udp 192.168.12.169:40643 -> 91.108.9.35:1400 -Flow 24 risky: udp 192.168.12.169:42405 -> 10.46.103.200:42554 -Flow 5 risky: tcp 192.168.12.169:46862 -> 149.154.167.51:443 -Flow 6 risky: tcp 192.168.12.169:46866 -> 149.154.167.51:443 -Flow 9 risky: tcp 192.168.12.169:40834 -> 149.154.167.222:443 -Flow 19 risky: udp 192.168.12.169:49667 -> 91.108.13.23:1400 -Flow 25 risky: udp 192.168.12.169:40906 -> 10.46.103.200:42554 -Flow 20 risky: udp 192.168.12.169:49780 -> 91.108.17.2:1400 +Flow 34 midstream: tcp 18.195.162.93:443 -> 192.168.12.169:38956 Flow 33 risky: icmp 192.168.12.169 -> 91.108.17.2 Flow 32 risky: icmp 192.168.12.169 -> 91.108.13.23 Flow 31 risky: icmp 192.168.12.169 -> 91.108.9.35 -Flow 34 midstream: tcp 18.195.162.93:443 -> 192.168.12.169:38956 +Flow 25 risky: udp 192.168.12.169:40906 -> 10.46.103.200:42554 +Flow 24 risky: udp 192.168.12.169:42405 -> 10.46.103.200:42554 +Flow 18 risky: udp 192.168.12.169:40643 -> 91.108.9.35:1400 +Flow 10 risky: tcp 192.168.12.169:37966 -> 149.154.167.91:443 +Flow 19 risky: udp 192.168.12.169:49667 -> 91.108.13.23:1400 +Flow 20 risky: udp 192.168.12.169:49780 -> 91.108.17.2:1400 +Flow 9 risky: tcp 192.168.12.169:40834 -> 149.154.167.222:443 +Flow 5 risky: tcp 192.168.12.169:46862 -> 149.154.167.51:443 +Flow 6 risky: tcp 192.168.12.169:46866 -> 149.154.167.51:443 diff --git a/test/results/flow-captured/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out b/test/results/flow-captured/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out index 85942bf64..903e4868a 100644 --- a/test/results/flow-captured/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out +++ b/test/results/flow-captured/tls_heuristics_enabled/tls_heur__trojan-tcp-tls.pcapng.out @@ -1,3 +1,3 @@ +Flow 2 risky: udp 127.0.0.1:52786 -> 127.0.0.53:53 Flow 5 risky: udp 127.0.0.1:53154 -> 127.0.0.53:53 Flow 7 risky: udp 192.168.1.183:39434 -> 192.168.1.253:53 -Flow 2 risky: udp 127.0.0.1:52786 -> 127.0.0.53:53 diff --git a/test/results/flow-captured/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out b/test/results/flow-captured/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out index 57479df0d..d1b413e70 100644 --- a/test/results/flow-captured/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out +++ b/test/results/flow-captured/tls_heuristics_enabled/tls_heur__vmess-tcp.pcapng.out @@ -1,2 +1,2 @@ -Flow 3 not-detected: tcp 127.0.0.1:40818 -> 127.0.0.1:1234 Flow 2 risky: udp 127.0.0.1:35957 -> 127.0.0.53:53 +Flow 3 not-detected: tcp 127.0.0.1:40818 -> 127.0.0.1:1234 diff --git a/test/results/flow-captured/zoom_extra_dissection/zoom.pcap.out b/test/results/flow-captured/zoom_extra_dissection/zoom.pcap.out index 7537da3f2..23e621dfe 100644 --- a/test/results/flow-captured/zoom_extra_dissection/zoom.pcap.out +++ b/test/results/flow-captured/zoom_extra_dissection/zoom.pcap.out @@ -1,5 +1,5 @@ -Flow 9 risky: udp 192.168.1.117:65394 -> 192.168.1.1:53 Flow 14 risky: udp 192.168.1.117:23903 -> 162.255.38.14:3479 Flow 16 risky: tcp 192.168.1.117:53872 -> 35.186.224.53:443 Flow 16 midstream: tcp 192.168.1.117:53872 -> 35.186.224.53:443 +Flow 9 risky: udp 192.168.1.117:65394 -> 192.168.1.1:53 Flow 30 risky: tcp 192.168.1.117:54871 -> 109.94.160.99:443 |