diff options
Diffstat (limited to 'tests/result/nDPId_telegram.pcap.txt')
| -rw-r--r-- | tests/result/nDPId_telegram.pcap.txt | 496 |
1 files changed, 496 insertions, 0 deletions
diff --git a/tests/result/nDPId_telegram.pcap.txt b/tests/result/nDPId_telegram.pcap.txt new file mode 100644 index 000000000..40e89950b --- /dev/null +++ b/tests/result/nDPId_telegram.pcap.txt @@ -0,0 +1,496 @@ +0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1588779596451,"flow_last_seen":1588779596451,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"} +0752{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJVAAEARYHzAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGANsCwWgAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1588779596451,"flow_last_seen":1588779596451,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,3"}} +0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":1588779596464,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":54306,"dst_port":1900,"l4_proto":"udp"} +0539{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACavyQAAAERSFfAqAE17\/\/\/+tQiB2wAhkPyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14} +0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":1588779596464,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":54306,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}} +0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":1588779596464,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0424{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":87,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJuJEAAAERXjrAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14} +0560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":1588779596464,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}} +0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1588779596465,"flow_last_seen":1588779596465,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0783{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTehJAAAERW5\/AqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14} +0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1588779596465,"flow_last_seen":1588779596465,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}} +0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":1588779596708,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0502{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":142,"pkt":"AQBeAAD7jP5XIzfkCABFAACAA9gAAP8RFKbAqAFL4AAA+xTpFOkAbODJAACEAAAAAAEAAAABBV9kYWNwBF90Y3AFbG9jYWwAAAwAAQAAAAAAHxxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzwAwAACkFoAAAEZQAEgAEAA4A2a7+VyM35Iz+VyM35A==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14} +0602{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":1588779596708,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_dacp._tcp.local"}} +0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":1588779596708,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4ba:91a:7817:e318","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0530{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":162,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAGwR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsHDYAAIQAAAAAAQAAAAEFX2RhY3AEX3RjcAVsb2NhbAAADAABAAAAAAAfHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjPADAAAKQWgAAARlAASAAQADgDZrv5XIzfkjP5XIzfk","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14} +0610{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":1588779596708,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4ba:91a:7817:e318","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_dacp._tcp.local"}} +0625{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":233,"pkt":"AQBeAAD7jP5XIzfkCABFAADbeQgAAP8RnxrAqAFL4AAA+xTpFOkAx\/OHAAAAAAAFAAAAAQABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEIX2FpcnBsYXnAHAAMgAEFX3Jhb3DAHAAMgAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcMAcAP+AAcBWACEAAQAAAHgAFwAAAADHIw5HYWJyaWVsZXMtaVBhZMAhAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14} +0655{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":253,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAMcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QDHLvQAAAAAAAUAAAABAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQhfYWlycGxhecAcAAyAAQVfcmFvcMAcAAyAARxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzBV9kYWNwwBwA\/4ABwFYAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwCEAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":253,"pkt_type":34525,"pkt_ipoffset":14} +0724{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":308,"pkt":"AQBeAAD7jP5XIzfkCABFAAEmpacAAP8RcjDAqAFL4AAA+xTpFOkBEl+aAACEAAAAAAMAAAADCV9zZXJ2aWNlcwdfZG5zLXNkBF91ZHAFbG9jYWwAAAwAAQAAEZQADQVfZGFjcARfdGNwwCMBOAExATMBRQE3ATEBOAE3AUEBMQE5ATABQQFCATQBMAEwATABMAEwATABMAEwATABMAEwATABMAEwATgBRQFGA2lwNgRhcnBhAAAMgAEAAAB4ABEOR2FicmllbGVzLWlQYWTAIwI3NQExAzE2OAMxOTIHaW4tYWRkcsCFAAyAAQAAAHgAAsCVwEEAL4ABAAAAeAAGwEEAAgAIwKYAL4ABAAAAeAAGwKYAAgAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14} +0755{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":328,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfARIR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QESmwYAAIQAAAAAAwAAAAMJX3NlcnZpY2VzB19kbnMtc2QEX3VkcAVsb2NhbAAADAABAAARlAANBV9kYWNwBF90Y3DAIwE4ATEBMwFFATcBMQE4ATcBQQExATkBMAFBAUIBNAEwATABMAEwATABMAEwATABMAEwATABMAEwATABOAFFAUYDaXA2BGFycGEAAAyAAQAAAHgAEQ5HYWJyaWVsZXMtaVBhZMAjAjc1ATEDMTY4AzE5Mgdpbi1hZGRywIUADIABAAAAeAACwJXAQQAvgAEAAAB4AAbAQQACAAjApgAvgAEAAAB4AAbApgACAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":328,"pkt_type":34525,"pkt_ipoffset":14} +0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1588779597291,"flow_last_seen":1588779597291,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.75","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0741{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEy\/KUAAP8ROizAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1588779597291,"flow_last_seen":1588779597291,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.75","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}} +0541{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":169,"pkt":"AQBeAAD7jP5XIzfkCABFAACbIpQAAP8R9c7AqAFL4AAA+xTpFOkAh0T\/AAAAAAABAAAAAQABHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAA\/wABwAwAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDQAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14} +0568{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":189,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAIcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCHgGsAAAAAAAEAAAABAAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAD\/AAHADAAhAAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":189,"pkt_type":34525,"pkt_ipoffset":14} +0516{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":153,"pkt":"AQBeAAD7jP5XIzfkCABFAACLhdQAAP8Rkp7AqAFL4AAA+xTpFOkAd9R+AAAAAAABAAAAAgABDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAD\/gAHADAAcAAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAQABAAAAeAAEwKgBSwAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14} +0549{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":173,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAHcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QB3D+sAAAAAAAEAAAACAAEOR2FicmllbGVzLWlQYWQFbG9jYWwAAP+AAcAMABwAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABAAEAAAB4AATAqAFLAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":173,"pkt_type":34525,"pkt_ipoffset":14} +0541{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":169,"pkt":"AQBeAAD7jP5XIzfkCABFAACbny4AAP8ReTTAqAFL4AAA+xTpFOkAh0T\/AAAAAAABAAAAAQABHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAA\/wABwAwAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDQAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14} +0568{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":189,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAIcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCHgGsAAAAAAAEAAAABAAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAD\/AAHADAAhAAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":189,"pkt_type":34525,"pkt_ipoffset":14} +0517{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":153,"pkt":"AQBeAAD7jP5XIzfkCABFAACLw3kAAP8RVPnAqAFL4AAA+xTpFOkAd1R\/AAAAAAABAAAAAgABDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAD\/AAHADAAcAAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAQABAAAAeAAEwKgBSwAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14} +0549{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":173,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAHcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QB3j+sAAAAAAAEAAAACAAEOR2FicmllbGVzLWlQYWQFbG9jYWwAAP8AAcAMABwAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABAAEAAAB4AATAqAFLAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":173,"pkt_type":34525,"pkt_ipoffset":14} +0595{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":211,"pkt":"AQBeAAD7jP5XIzfkCABFAADF7nQAAP8RKcTAqAFL4AAA+xTpFOkAsS9YAACEAAAAAAMAAAACHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAAEIABAAARlAABAMApAAwAAQAAEZQAAsAMwAwAIYABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDTADAAvgAEAABGUAAnADAAFAACAAEAAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14} +0623{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":231,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfALER\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCxasQAAIQAAAAAAwAAAAIcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAAQgAEAABGUAAEAwCkADAABAAARlAACwAzADAAhgAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANMAMAC+AAQAAEZQACcAMAAUAAIAAQAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":231,"pkt_type":34525,"pkt_ipoffset":14} +0559{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":184,"pkt":"AQBeAAD7jP5XIzfkCABFAACqi7MAAP8RjKDAqAFL4AAA+xTpFOkAloOLAAAAAAACAAIAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAHADAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwAwADAABAAARlAAOC0x1Y2EncyBpUGFkwAwAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14} +0587{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":204,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAJYR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCWvvcAAAAAAAIAAgAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAcAMAAwAAQAAEZQAEA1MdWNh4oCZcyBpTWFjwAzADAAMAAEAABGUAA4LTHVjYSdzIGlQYWTADAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":204,"pkt_type":34525,"pkt_ipoffset":14} +0726{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":308,"pkt":"AQBeAAD7jP5XIzfkCABFAAEmz4wAAP8RSEvAqAFL4AAA+xTpFOkBEl+aAACEAAAAAAMAAAADCV9zZXJ2aWNlcwdfZG5zLXNkBF91ZHAFbG9jYWwAAAwAAQAAEZQADQVfZGFjcARfdGNwwCMBOAExATMBRQE3ATEBOAE3AUEBMQE5ATABQQFCATQBMAEwATABMAEwATABMAEwATABMAEwATABMAEwATgBRQFGA2lwNgRhcnBhAAAMgAEAAAB4ABEOR2FicmllbGVzLWlQYWTAIwI3NQExAzE2OAMxOTIHaW4tYWRkcsCFAAyAAQAAAHgAAsCVwEEAL4ABAAAAeAAGwEEAAgAIwKYAL4ABAAAAeAAGwKYAAgAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14} +0756{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":328,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfARIR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QESmwYAAIQAAAAAAwAAAAMJX3NlcnZpY2VzB19kbnMtc2QEX3VkcAVsb2NhbAAADAABAAARlAANBV9kYWNwBF90Y3DAIwE4ATEBMwFFATcBMQE4ATcBQQExATkBMAFBAUIBNAEwATABMAEwATABMAEwATABMAEwATABMAEwATABOAFFAUYDaXA2BGFycGEAAAyAAQAAAHgAEQ5HYWJyaWVsZXMtaVBhZMAjAjc1ATEDMTY4AzE5Mgdpbi1hZGRywIUADIABAAAAeAACwJXAQQAvgAEAAAB4AAbAQQACAAjApgAvgAEAAAB4AAbApgACAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":328,"pkt_type":34525,"pkt_ipoffset":14} +0518{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":153,"pkt":"AQBeAAD7jP5XIzfkCABFAACLFGwAAP8RBAfAqAFL4AAA+xTpFOkAd1R\/AAAAAAABAAAAAgABDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAD\/AAHADAAcAAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAQABAAAAeAAEwKgBSwAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14} +0550{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":173,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAHcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QB3j+sAAAAAAAEAAAACAAEOR2FicmllbGVzLWlQYWQFbG9jYWwAAP8AAcAMABwAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABAAEAAAB4AATAqAFLAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":173,"pkt_type":34525,"pkt_ipoffset":14} +0540{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACa8TAAAAERFkvAqAE17\/\/\/+tQiB2wAhkPyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14} +0538{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":167,"pkt":"AQBeAAD7jP5XIzfkCABFAACZz9MAAP8RSJHAqAFL4AAA+xTpFOkAhVCYAACEAAAAAAIAAAACDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAAcgAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAYABAAAAeAAEwKgBS8AMAC+AAQAAAHgACMAMAARAAAAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14} +0568{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":187,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAIUR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCFjAQAAIQAAAAAAgAAAAIOR2FicmllbGVzLWlQYWQFbG9jYWwAAByAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABgAEAAAB4AATAqAFLwAwAL4ABAAAAeAAIwAwABEAAAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":187,"pkt_type":34525,"pkt_ipoffset":14} +0682{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779599,"pkt_len":275,"pkt":"AQBeAAD7jP5XIzfkCABFAAEFrJcAAP8Ra2HAqAFL4AAA+xTpFOkA8YKfAACEAAAAAAUAAAADHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAAEIABAAARlAABAMApAAwAAQAAEZQAAsAMwAwAIYABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDTAZgAcgAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwGYAAYABAAAAeAAEwKgBS8AMAC+AAQAAEZQACcAMAAUAAIAAQMBmAC+AAQAAAHgACMBmAARAAAAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14} +0712{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779599,"pkt_len":295,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAPER\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QDxvgsAAIQAAAAABQAAAAMcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAAQgAEAABGUAAEAwCkADAABAAARlAACwAzADAAhgAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANMBmAByAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjAZgABgAEAAAB4AATAqAFLwAwAL4ABAAARlAAJwAwABQAAgABAwGYAL4ABAAAAeAAIwGYABEAAAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":295,"pkt_type":34525,"pkt_ipoffset":14} +0504{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":142,"pkt":"AQBeAAD7jP5XIzfkCABFAACAMbcAAP8R5sbAqAFL4AAA+xTpFOkAbODIAACEAAAAAAEAAAABBV9kYWNwBF90Y3AFbG9jYWwAAAwAAQAAAAAAHxxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzwAwAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14} +0532{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":162,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAGwR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsHDUAAIQAAAAAAQAAAAEFX2RhY3AEX3RjcAVsb2NhbAAADAABAAAAAAAfHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjPADAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14} +0627{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":233,"pkt":"AQBeAAD7jP5XIzfkCABFAADbJxEAAP8R8RHAqAFL4AAA+xTpFOkAx\/KHAAAAAAAFAAAAAQABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEIX2FpcnBsYXnAHAAMgAEFX3Jhb3DAHAAMgAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcMAcAP+AAcBWACEAAQAAAHgAFwAAAADHIw5HYWJyaWVsZXMtaVBhZMAhAAApBaAAABGUABIABAAOANuu\/lcjN+SM\/lcjN+Q=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14} +0657{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":253,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAMcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QDHLfQAAAAAAAUAAAABAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQhfYWlycGxhecAcAAyAAQVfcmFvcMAcAAyAARxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzBV9kYWNwwBwA\/4ABwFYAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwCEAACkFoAAAEZQAEgAEAA4A267+VyM35Iz+VyM35A==","pkt_caplen":253,"pkt_type":34525,"pkt_ipoffset":14} +0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1588779600828,"flow_last_seen":1588779600828,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp"} +0422{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":84,"pkt":"EBMx8Tl2KDc3AG3ICABFAABGiX4AAP8RronAqAFNwKgBAfC\/ADUAMkhio9MBAAABAAAAAAAABWU3MDQ3A2UxMgpha2FtYWllZGdlA25ldAAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14} +0650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1588779600828,"flow_last_seen":1588779600828,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e7047.e12.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0740{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyb04AAP8Rx4PAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0448{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":100,"pkt":"KDc3AG3IEBMx8Tl2CABFAABWE2lAADkRqo\/AqAEBwKgBTQA18L8AQgAAo9OBgAABAAEAAAAABWU3MDQ3A2UxMgpha2FtYWllZGdlA25ldAAAAQABwAwAAQABAAAAFAAEXHr3XA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14} +0665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1588779600828,"flow_last_seen":1588779600842,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e7047.e12.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.247.92"}} +0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1588779601222,"flow_last_seen":1588779601222,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"} +1000{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779601,"pkt_len":506,"pkt":"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","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14} +0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1588779601222,"flow_last_seen":1588779601222,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}} +0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1588779601223,"flow_last_seen":1588779601223,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"} +0996{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779601,"pkt_len":506,"pkt":"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","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14} +0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1588779601223,"flow_last_seen":1588779601223,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}} +0753{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779601,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJZAAEARYHvAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAM98X0EAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0555{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779603,"pkt_len":181,"pkt":"AQBeAAD7wJrQLWJ0CABFAACnQj4AAP8R1i7AqAE14AAA+xTpFOkAk34YAAAAAAAFAAAAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAyAAQ9fY29tcGFuaW9uLWxpbmvAFQAMgAEFX3Jhb3DAFQAMgAEIX2FpcnBsYXnAFQAMgAEMX3NsZWVwLXByb3h5BF91ZHDAGgAMgAEAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":181,"pkt_type":2048,"pkt_ipoffset":14} +0603{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1588779596464,"flow_last_seen":1588779603292,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":53,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":100,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}} +0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1588779603292,"flow_last_seen":1588779603292,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::18a0:a412:8935:c01b","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0584{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779603,"pkt_len":201,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAJMR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QCTHG8AAAAAAAUAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADIABD19jb21wYW5pb24tbGlua8AVAAyAAQVfcmFvcMAVAAyAAQhfYWlycGxhecAVAAyAAQxfc2xlZXAtcHJveHkEX3VkcMAaAAyAAQAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":201,"pkt_type":34525,"pkt_ipoffset":14} +0607{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1588779603292,"flow_last_seen":1588779603292,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::18a0:a412:8935:c01b","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}} +0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1588779603320,"flow_last_seen":1588779603320,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.53","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0741{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779603,"pkt_len":320,"pkt":"wJrQLWJ0KDc3AG3ICABFAAEyUGUAAP8R5oLAqAFNwKgBNRTpFOkBHhkkAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0566{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1588779603320,"flow_last_seen":1588779603320,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.53","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}} +0631{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779604,"pkt_len":238,"pkt":"AQBeAAD7wJrQLWJ0CABFAADgDXQAAP8RCsDAqAE14AAA+xTpFOkAzL4AAAAAAAADAAMAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAwAAQ9fY29tcGFuaW9uLWxpbmvAFQAMAAEMX3NsZWVwLXByb3h5BF91ZHDAGgAMAAHAJQAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AlwCUADAABAAARlAAOC0x1Y2EncyBpUGFkwCXAOwAMAAEAABGUABIPNTAtMzUtMTAtNzAuMSAxwDsAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":238,"pkt_type":2048,"pkt_ipoffset":14} +0660{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779604,"pkt_len":258,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAMwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QDMXFcAAAAAAAMAAwAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADAABD19jb21wYW5pb24tbGlua8AVAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAaAAwAAcAlAAwAAQAAEZQAEA1MdWNh4oCZcyBpTWFjwCXAJQAMAAEAABGUAA4LTHVjYSdzIGlQYWTAJcA7AAwAAQAAEZQAEg81MC0zNS0xMC03MC4xIDHAOwAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":258,"pkt_type":34525,"pkt_ipoffset":14} +0741{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779604,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEy\/rUAAP8ROBzAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0753{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779606,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJdAAEARYHrAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGABAmSTUAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0505{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":142,"pkt":"AQBeAAD7wJrQLWJ0CABFAACAeJ4AAP8Rn\/XAqAE14AAA+xTpFOkAbGrlAAAAAAABAAEAAAABDF9zbGVlcC1wcm94eQRfdWRwBWxvY2FsAAAMAAHADAAMAAEAABGRABIPNTAtMzUtMTAtNzAuMSAxwAwAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14} +0533{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":162,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAGwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsCTwAAAAAAAEAAQAAAAEMX3NsZWVwLXByb3h5BF91ZHAFbG9jYWwAAAwAAcAMAAwAAQAAEZEAEg81MC0zNS0xMC03MC4xIDHADAAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1588779607374,"flow_last_seen":1588779607374,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp"} +0411{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":75,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA9u6QAAP8RfGzAqAFNwKgBAcuWADUAKd8a0oUBAAABAAAAAAAAAmluCWFwcGNlbnRlcgJtcwAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14} +0651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1588779607374,"flow_last_seen":1588779607374,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","category":"Cloud"},"dns": {"query":"in.appcenter.ms","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0593{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":209,"pkt":"KDc3AG3IEBMx8Tl2CABFAADD2ppAADkR4vDAqAEBwKgBTQA1y5YArwAA0oWBgAABAAMAAAAAAmluCWFwcGNlbnRlcgJtcwAAAQABwAwABQABAAAAXQAuGWluMi1wcm9kLWVhc3QtdXMyLTIzZmEzMzAOdHJhZmZpY21hbmFnZXIDbmV0AMAtAAUAAQAAAAsAMBNpbjItZ3cyLTA0LWVkZTZmMDZlB2Vhc3R1czIIY2xvdWRhcHAFYXp1cmUDY29tAMBnAAEAAQAAAAUABBQsTvs=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14} +0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1588779607374,"flow_last_seen":1588779607388,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":41,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","category":"Cloud"},"dns": {"query":"in.appcenter.ms","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"20.44.78.251"}} +0741{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyjSEAAP8RqbDAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1588779608134,"flow_last_seen":1588779608134,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"} +0433{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779608,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABEQD4AAEARtebAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1588779608134,"flow_last_seen":1588779608134,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}} +0433{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABE4wYAAEAREx7AqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1588779611355,"flow_last_seen":1588779611355,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"239.255.255.250","src_port":57916,"dst_port":1900,"l4_proto":"udp"} +0542{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":167,"pkt":"AQBef\/\/6jP5XIzfkCABFAACZH80AAAER55nAqAFL7\/\/\/+uI8B2wAhTXETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14} +0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1588779611355,"flow_last_seen":1588779611355,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"239.255.255.250","src_port":57916,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}} +0741{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyXK8AAP8R2iLAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0754{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJhAAEARYHnAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGALuAMeAAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0542{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":167,"pkt":"AQBef\/\/6jP5XIzfkCABFAACZnzoAAAERaCzAqAFL7\/\/\/+uI8B2wAhTXETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14} +0542{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":167,"pkt":"AQBef\/\/6jP5XIzfkCABFAACZ2TYAAAERLjDAqAFL7\/\/\/+uI8B2wAhTXETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1588779615019,"flow_last_seen":1588779615019,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp"} +0427{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779615,"pkt_len":85,"pkt":"EBMx8Tl2KDc3AG3ICABFAABHiDkAAP8Rr83AqAFNwKgBAe7AADUAMxxUuQsBAAABAAAAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14} +0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1588779615019,"flow_last_seen":1588779615019,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0449{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779615,"pkt_len":101,"pkt":"KDc3AG3IEBMx8Tl2CABFAABXJ0xAADkRlqvAqAEBwKgBTQA17sAAQwAAuQuBgAABAAEAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAA4ABFx69t8=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14} +0669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1588779615019,"flow_last_seen":1588779615032,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.246.223"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1588779615961,"flow_last_seen":1588779615961,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0435{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779615,"pkt_len":91,"pkt":"AQBeAAD78KNaMBgSCABFAABNRwcAAP8R0cDAqAE04AAA+xTpFOkAOcUdAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAyAAQhfYWlycGxhecASAAyAAQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14} +0591{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1588779615961,"flow_last_seen":1588779615961,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1588779615962,"flow_last_seen":1588779615962,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4dc:edec:5b0c:a661","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0465{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779615,"pkt_len":111,"pkt":"MzMAAAD78KNaMBgSht1gBhFuADkR\/\/6AAAAAAAAABNzt7FsMpmH\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5dUAAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADIABCF9haXJwbGF5wBIADIAB","pkt_caplen":111,"pkt_type":34525,"pkt_ipoffset":14} +0600{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1588779615962,"flow_last_seen":1588779615962,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4dc:edec:5b0c:a661","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.7","src_port":23174,"dst_port":521,"l4_proto":"udp"} +0443{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABERC0AAEARERTAqAFNW2wIB1qGAgkAMLAM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8o+UYRJgGi8A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.7","src_port":23174,"dst_port":521,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":23174,"dst_port":523,"l4_proto":"udp"} +0444{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEWYkAAEAR97nAqAFNW2wMBVqGAgsAMMZE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/VYJzCLkR9XA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":23174,"dst_port":523,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":23174,"dst_port":527,"l4_proto":"udp"} +0443{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEZqwAAEAR5prAqAFNW2wQAVqGAg8AMLyJ3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9u+DapRNA5DQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":23174,"dst_port":527,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.1","src_port":23174,"dst_port":536,"l4_proto":"udp"} +0444{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEMZgAAEARH6\/AqAFNW2wMAVqGAhgAMB7S3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8nsGAWUhbrUA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.1","src_port":23174,"dst_port":536,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":23174,"dst_port":538,"l4_proto":"udp"} +0443{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABECJIAAEARTK7AqAFNW2wICFqGAhoAMJgJ3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8HjiXC2fxIoA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":23174,"dst_port":538,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.4","src_port":23174,"dst_port":538,"l4_proto":"udp"} +0443{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEVZYAAEAR963AqAFNW2wQBFqGAhoAMGBV3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8kkP6VHClAVg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.4","src_port":23174,"dst_port":538,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0475{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcvxJAADMRYxZbbAgHwKgBTQIJWoYASDvF3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeKPlGESYBovAAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0gJAADMRUCVbbAgIwKgBTQIaWoYASCPC3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeB44lwtn8SKAAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0476{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcHlxAADQR\/s5bbAwFwKgBTQILWoYASFH93EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe1WCcwi5EfVwAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcJ8JAADQR9WxbbAwBwKgBTQIYWoYASKqK3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeJ7BgFlIW61AAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcdvtAADYRoDBbbBAEwKgBTQIaWoYASOwN3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeJJD+lRwpQFYAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcavZAADYRrDhbbBABwKgBTQIPWoYASEhC3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJebvg2qUTQOQ0AAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0504{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":142,"pkt":"AQBeAAD7wJrQLWJ0CABFAACAUoIAAP8RxhHAqAE14AAA+xTpFOkAbHPlAAAAAAABAAEAAAABDF9zbGVlcC1wcm94eQRfdWRwBWxvY2FsAAAMAAHADAAMAAEAABGIABIPNTAtMzUtMTAtNzAuMSAxwAwAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14} +0533{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":162,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAGwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsEjwAAAAAAAEAAQAAAAEMX3NsZWVwLXByb3h5BF91ZHAFbG9jYWwAAAwAAcAMAAwAAQAAEYgAEg81MC0zNS0xMC03MC4xIDHADAAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14} +0499{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8v0VAADMRYsNbbAgHwKgBTQIJWoYAaD3C3EwAKRVlt6y8I22p7aDVl1kuRsPrW9KEfnzYzQILhSJVZwm4ydGInRd8K6fl4JcT3ZYFqyIenAd9IA0qgCEd7GPQ6mJV\/aaZBQA9j+\/r0xZYfE1eMfKMjrw7DPZVZF3Y","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8TYUAAEARA4rAqAFNW2wMAVqGAhgAaPtH3EwAKRVlt6y8I22p7aDVlzF9tkqG8Vy9mc+httTfBLUUKD3nPIpyRy3ItnD3hVzo5GeIoM2qaFz\/yCQX0+y0hipTw\/kylFSjOOn2uuzWtdHeg39EeEdeCXu4W27oK0KN","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0497{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB80idAADMRT+BbbAgIwKgBTQIaWoYAaCPe3EwAKRVlt6y8I22p7aDVl5GbCK4j4zRv3DTd8DT6OUw6qpjroPsdobKbJkssqpPX5uXMLNXGSRggLwmRIKQDuFEnjoz+E5Zlydodds5mKwEYgkGhNIjlK85eZgSRk81C","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0754{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJlAAEARYHjAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAPwKR20AAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8HoJAADQR\/ohbbAwFwKgBTQILWoYAaHRJ3EwAKRVlt6y8I22p7aDVl5cYNmc7owIGPJxlskGx5br+SSQy40sMDI5d++f\/6aTzwNmsmc+tH0QUeknBRS9SCGoK6JwfyvJhza8gjx8KUlZD1YkPUiuIlncqMpzfBBG3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KBFAADQR9P1bbAwBwKgBTQIYWoYAaKHG3EwAKRVlt6y8I22p7aDVl1abu3bDGz6o8fsNot++0zK7RzO7PBk+7Vrmoj8ysTske1f\/EcqIuDby2Fk6mUM4OzQiEPo4kF6e\/Y9\/bAWD7HEOuyvzTKmDTuxutup64haF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0497{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8dyVAADYRn+ZbbBAEwKgBTQIaWoYAaCIT3EwAKRVlt6y8I22p7aDVl45mJpEhOWgZ6A6Kc6hID4w4KLG36jYh+Cxfh82Yl8XDNtvIeuCeB52AwTUXULg6UcBqL7rYB23KloHtMZxkmQf1gFMMk8wX4hEL6yN80sZ2","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0497{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8azBAADYRq95bbBABwKgBTQIPWoYAaMOY3EwAKRVlt6y8I22p7aDVl+cOa7ebeRVfTEQWHnWAvbCNIPN6eM79xlpdrcTkZa70ozc5Ft59HxlMSrLPVRuFHV2it7vPpbUvtl1BMHRDI0C3GGHTZQO1jEuX1r8k9Zfa","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0443{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEJ4MAAEARLb7AqAFNW2wIB1qGAgkAMNdM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9YEU+KLH48og==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0443{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABECGkAAEARSNrAqAFNW2wMBVqGAgsAMDee3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+JMCg+UR2p3g==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0443{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEtEsAAEARmPvAqAFNW2wQAVqGAg8AMCLv3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9XMjEOgWmzbw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE1K0AAEARfJnAqAFNW2wMAVqGAhgAMH1q3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/zkwdhjprdBQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE3YcAAEARd7jAqAFNW2wICFqGAhoAMCsU3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/yyawhg3+adw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABExwsAAEARhjjAqAFNW2wQBFqGAhoAMNDL3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/goo8O4yu8UQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcv2xAADMRYrxbbAgHwKgBTQIJWoYASGMF3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeWBFPiix+PKIAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0476{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0khAADMRT99bbAgIwKgBTQIaWoYASLbM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe8smsIYN\/mncAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0476{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcHp1AADQR\/o1bbAwFwKgBTQILWoYASMNW3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeiTAoPlEdqd4AAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcKDRAADQR9PpbbAwBwKgBTQIYWoYASAkj3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe85MHYY6a3QUAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0501{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8\/M4AAEARWDrAqAFNW2wIB1qGAgkAaINR3EwAKRVlt6y8I22p7aDVlyldsxmqbnFcCOoxJ9SrRoEgHcXJZ5Xpn3Ec\/ian2\/1mEpr6pPLgCHzhKwUXMJzeOfOiKoKWQ6oD2U2\/BWpii+su5vnDLCMiSN3sbJ8LYBJg","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8dIYAAEAR3ITAqAFNW2wMBVqGAgsAaFev3EwAKRVlt6y8I22p7aDVl5Q2Tp03KFy0BQuDNuRI\/p06QUkGfLe8r+7Xo4B\/82N0ml1KiKraN+qfy\/4RVnRnPEzYLOupSzeRhFGgrLm8kE6AoyNpqC46vz3raNsLWlCj","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0497{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8VKYAAEAR+GjAqAFNW2wQAVqGAg8AaIqt3EwAKRVlt6y8I22p7aDVl5SF6dBtlZfMFccc0vHJ86GlqPUUOC5GuyDUdKB5KltpDqPCcGbk9BBnmvijRKU9Dq5csL4ODGFgXr9dEvYsEeCqLjo8HGNgHagHZOsTdBLK","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB85wcAAEARagfAqAFNW2wMAVqGAhgAaGzN3EwAKRVlt6y8I22p7aDVl153AzqJEKeYz5NaGMlfds3WxAoif1JWLe\/x3pKRB964061J7eYaSjDUmusPqk4sY1OalKmHgycwgeEF+A1hxXrHpm0C8cQEdg0Lo7wsz6Z3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0497{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Mp8AAEARImnAqAFNW2wICFqGAhoAaC+Q3EwAKRVlt6y8I22p7aDVl6tXgrLpgbbl7eXHDd2Qei9ZNgLgOW5QtCXbb5jWD0kcAsgxBsVqwOoZnWnc1uYEMVnNVyyHZLIuENAjqflfCTq3asu9q8Ief4VqBZp847FQ","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0501{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Nl0AAEARFq\/AqAFNW2wQBFqGAhoAaFG+3EwAKRVlt6y8I22p7aDVl+Q1+r0dJ2Fa7\/pVxUg4a79u69xdU\/qhLWT108nmnr\/ImFhYcx9KqcxW9Np4XKjnVgwGlxyr787ofTP+B+0Nkt7ep5lolbHi97D2YMEv3ptE","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcd0dAADYRn+RbbBAEwKgBTQIaWoYASFyE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe4KKPDuMrvFEAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABca0BAADYRq+5bbBABwKgBTQIPWoYASK6n3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeVzIxDoFps28AAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0502{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8HrhAADQR\/lJbbAwFwKgBTQILWoYAaI1d3EwAKRVlt6y8I22p7aDVl9G\/fyvwThLwtRHHC9MZF4tcUeDyk0Nn82CF6LUqTVEd6zhw+1EGAk6yTq2GQQZ\/lHG5S5nKWjxevU\/ZhZ+WPgRW8kXFHiGkyv4l8VK\/kIYL","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8v5ZAADMRYnJbbAgHwKgBTQIJWoYAaJ\/p3EwAKRVlt6y8I22p7aDVlxREakotVNEDE142Pub8NqzS1LSd8S5f2XRCdXTA3CZX2oXNd7mdteWvpq+sLXxNpcAckLTim4cKUWl\/XDFRD7FihtvmQS+FjqXTKu9Hmd1g","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB80mpAADMRT51bbAgIwKgBTQIaWoYAaLyo3EwAKRVlt6y8I22p7aDVl4gDyKkjCfJauyezv1whF64gfKQLbu+OfKbU2EFG+HA7PtPxdXjlhcQcp+HEshzrTvaHtVA+tjnUdVWIjj0hgok3Lf9ef7fRzlVAIN\/Tn2pJ","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0432{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8HtcAAEARNnLAqAFNW2wIB1qGAgkAKOcY3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0433{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8DWwAAEARQ9\/AqAFNW2wMBVqGAgsAKOMY3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0432{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8iUQAAEARxArAqAFNW2wQAVqGAg8AKN8Y3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0432{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8hZgAAEARy7bAqAFNW2wMAVqGAhgAKOMP3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0432{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8NtsAAEARHm3AqAFNW2wICFqGAhoAKOcG3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0432{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8fpgAAEARzrPAqAFNW2wQBFqGAhoAKN8K3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0501{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8T1cAAEARBbLAqAFNW2wIB1qGAgkAaPgc3EwAKRVlt6y8I22p7aDVlyePunxRRl1dPXK15pZxqRZddA\/0oz\/jG1axp\/nTsEi2pdUUQ4erjeRLjmGtydPdrZkkjiBDJYTNLyYb13Mq+IM2jN4\/GUtxXmKTdOAiWbiI","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0448{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMv55AADMRYppbbAgHwKgBTQIJWoYAOBYy3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0447{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABM0mxAADMRT8tbbAgIwKgBTQIaWoYAOBYg3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8Hr1AADQR\/k1bbAwFwKgBTQILWoYAaMYu3EwAKRVlt6y8I22p7aDVl97xbqCiqoUY5qJ414f4njwPu3I6sPWarCCakqHtMWFZXH0BXD1\/9ejf4xb55zkgoLmvMfEBhoxzzoc2ELq8sVW5oKtYWk76795u3vdkdvuz","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KFlAADQR9LVbbAwBwKgBTQIYWoYAaCmK3EwAKRVlt6y8I22p7aDVl8h1gFR\/8bxqYHF3yk6rd6P1AfsAbS\/j7dCMeGo36UmDmuu\/ZqsZii2i187N9Lv6jIkwUWQ3NdKwNxwxbLD6RNNWWIJQ1Usc+LqNCF8HZ8E2","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0449{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMHr5AADQR\/nxbbAwFwKgBTQILWoYAOBIy3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0448{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMKF5AADQR9OBbbAwBwKgBTQIYWoYAOBIp3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8d25AADYRn51bbBAEwKgBTQIaWoYAaHWi3EwAKRVlt6y8I22p7aDVl5rCFpxs7YHBZBZLmwquhsHPmVy3OJUPwksj34SDm8YldY3BnFx2JQeujibFeEqmznk9Wf0oInzfFml5xniV\/YyeK3vk71VPabbjLN9EBPJt","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0497{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8a1xAADYRq7JbbBABwKgBTQIPWoYAaK4I3EwAKRVlt6y8I22p7aDVlxKXtYSpL6tGVUJCxziEWfCslxpWFgl5thrDaDc7ojYiWBSENhNnTmjkSqADZkDqs+OvDQmA6kbCdtIXT+2ySkSALnvsiFHRIhCYm3xTo7bw","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0445{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEq+kAAEARqVfAqAFNW2wIB1qGAgkAMNEE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/qxE4b8QntGQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0446{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEWcYAAEAR93zAqAFNW2wMBVqGAgsAMK7J3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/\/iP5DS4Xr7A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0443{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEtzYAAEARlhDAqAFNW2wQAVqGAg8AMMDV3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9HVl8svXS7Ow==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0446{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE\/dYAAEARU3DAqAFNW2wMAVqGAhgAMAL+3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/TGg39ngRh5Q==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABECZ0AAEARS6PAqAFNW2wICFqGAhoAMLS33EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+vFfzS1uywaQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEq0sAAEARofjAqAFNW2wQBFqGAhoAMDPP3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/bleHhvhswmA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0448{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMd3NAADYRn8hbbBAEwKgBTQIaWoYAOA4k3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0448{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMa15AADYRq+BbbBABwKgBTQIPWoYAOA4y3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0477{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcv61AADMRYntbbAgHwKgBTQIJWoYASFu93EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe6sROG\/EJ7RkAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0476{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0nlAADMRT65bbAgIwKgBTQIaWoYASD9w3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJerxX80tbssGkAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0632{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":234,"pkt":"KDc3AG3IEBMx8Tl2CABFAADcv7ZAADMRYfJbbAgHwKgBTQIJWoYAyIR53EwAKRVlt6y8I22p7aDVl5d0AH5ObAqwAU8xBlDGVIkxaDwsl\/Tx3dQPtrczrlRgUFPeHc9gzUo17OOu7sbg8dEu3CSp9TK4pNX4iKSt1aPZvLRVY\/KtFRmtWJB9Dq6AleEU\/fGQZvsz95xhxe69E7Va5PPnA7FrjhkrvKx3BpDzkhYhBSqOIKw92MsnjopeCLN+PsD0eBa6OlPemDUc6dK\/4+U\/u98ahW80h7v2XshXT2KL76fQxjavhwr71c\/O","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14} +0478{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcHuJAADQR\/khbbAwFwKgBTQILWoYASDmC3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe\/4j+Q0uF6+wAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0477{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcKGxAADQR9MJbbAwBwKgBTQIYWoYASI223EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe0xoN\/Z4EYeUAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0501{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8HfUAAEARNxTAqAFNW2wIB1qGAgkAaGBN3EwAKRVlt6y8I22p7aDVl\/xKgqF60rJT3oaqpicxIMnoI3U+wgaLvgpgOwdBNwqB5xCwgQ6Kzerzf\/TGl1GJKfcpRvYZUX\/nAEWtODzC2r7QaC+YBNsA+8SUUO6steuY","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8a\/8AAEAR5QvAqAFNW2wMBVqGAgsAaNeN3EwAKRVlt6y8I22p7aDVl5s5VHoewnh2Vsojy\/up5tvpCX3oaEFOxkOqXoPwJ3bO+t6XO4INQPSYS6BlcHjofBzZiEhuzEuv6s3ngqwJRMiouSRPshKutwTCGkvk28Sl","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB883QAAEARWZrAqAFNW2wQAVqGAg8AaIKz3EwAKRVlt6y8I22p7aDVl32Pc1HHYEYZi03qucZTFlZCNbubeA6q68jFtFI807L3L2Q1Iq\/+vfYqu+JWPFPTntvaZFr70bw2+IJc0TUQfNCX+E3f8ZYzjfyys94dFrWT","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8dtkAAEAR2jXAqAFNW2wMAVqGAhgAaBww3EwAKRVlt6y8I22p7aDVl4vdmXzL72TBwedu7KHurKAh2P1dZR4VCu529CPBH17fOUG3BML2yTk2nLmjgNfhYpep7QwAOhc9vcf32ofx\/+LJzcEwwk2H80BEPwH6IV27","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8f+UAAEAR1SLAqAFNW2wICFqGAhoAaL863EwAKRVlt6y8I22p7aDVl2Z+eUAsmBtQeyC0OUCkfafRX4V225PAmCB0ZuqiMkYuVH6y\/\/nCzJBhcNkpFmRP0pMKp8O1m88zc2drgTh2WlOw+HbtYOEO6ont+XVyA4Ix","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8zjwAAEARfs\/AqAFNW2wQBFqGAhoAaNO63EwAKRVlt6y8I22p7aDVl2tG15m00Z4O5OQSm8Uf2GNj8pAbvopp1wpqnYKwsNZGvZRa0ShBkvgF25\/+Y5mE73LLX4U7zxEu5AntT0mzac2u85OXiFO8LcRPWoBqHH6T","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1588779617174,"flow_last_seen":1588779617174,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.52","src_port":23174,"dst_port":31480,"l4_proto":"udp"} +0479{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":122,"pkt":"8KNaMBgSKDc3AG3ICABFAABsqlYAAEARTFnAqAFNwKgBNFqGevgAWLgQjfykZ0OTWbVGSN3cMHZvNB3RufFF5FIV8MQ0P3KjKgWFEWl4FO4hV\/puQOILS4RjUor87I6iIoOnx\/A9NueumG+cX0HrNbBHt0bLwMXSB9A=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14} +0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1588779617174,"flow_last_seen":1588779617174,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":23174,"dst_port":60723,"l4_proto":"udp"} +0481{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":122,"pkt":"EBMx8Tl2KDc3AG3ICABFAABs\/QcAAEARlrXAqAFNVwvNw1qG7TMAWH9So7C\/sNzcuk+cyiR2EyU9Q\/nbaTxTjDBemDeFTsb5lNpyEwlgOlPEUd9m7ay58cjORIuAWP8IcwSg0vb1EIxOrmmqeB4nTaYDWzAgf8R5\/bQ=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14} +0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1588779617174,"flow_last_seen":1588779617174,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":23174,"dst_port":60723,"l4_proto":"udp","ndpi": {"proto":"OpenVPN","category":"VPN"}} +0476{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcd3tAADYRn7BbbBAEwKgBTQIaWoYASL6H3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe25Xh4b4bMJgAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0631{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":234,"pkt":"KDc3AG3IEBMx8Tl2CABFAADcv79AADMRYelbbAgHwKgBTQIJWoYAyO2t3EwAKRVlt6y8I22p7aDVlz0hS6R\/P6+h7iDam6YNZso1HdbCXaIDIoav8iPnn0fy6+kW9pNMmLa42T9nF\/vZoSfsIHIOW25zUxWLLAxS+KjdCoqjtaEnysQ9pWmOqty88YWXptpYLJIsnEoYpLj73ezoCreiNoCQ4U69zJz9X3a0\/UDc7Pi882XCIV9co6HLki9cZNIlEUT1D\/ZlHKeKTlQV8OBLC21Y0mtlViOwDpz2GB\/I0aD0+8OrgNpr858X","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14} +0476{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABca2FAADYRq81bbBABwKgBTQIPWoYASEuO3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJeR1ZfLL10uzsAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0477{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":122,"pkt":"KDc3AG3I8KNaMBgSCABFAABsUAUAAEARpqrAqAE0wKgBTXr4WoYAWLDM6Td5ePjQrnTyke2EPHu3iQJhxLIf06esu8RwrHmFIT7cHf5ycIamk2yhxwjAfE09exZIgAEDzMDiso7KFMuIe8fjwzyyS3MKiG+Cd3eNuy0=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14} +0501{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB80plAADMRT25bbAgIwKgBTQIaWoYAaPDj3EwAKRVlt6y8I22p7aDVl+MX7HtGUYbwrQqCr4nYVPeDmZbZ2Bf+vN8udIrDAEL8It1Wi\/+ue1QTjqrg\/9qVehBOkj4\/T+fdlhHLBZwboP8C240mh3cEijKopP7xMWpM","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8HxtAADQR\/e9bbAwFwKgBTQILWoYAaHvv3EwAKRVlt6y8I22p7aDVl0UqJlE1OabPQTf2e0N80C8IyLi4FSthq7K\/CKRgPYLvFR3sah0B1uHAyn687xtiZVkMkP5dayfPZm+vj1DRlUUDewwWiFZHmp+GGswDrW2N","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KJ5AADQR9HBbbAwBwKgBTQIYWoYAaM8Z3EwAKRVlt6y8I22p7aDVlw7pozkX8PRV27QTDvgLl\/jawWiOrIHky37V4Y2MkH4S8LDWtKdz8Oj7gko4EANqBHi4pKpWaNOhyyNr0cW4ouLjfVXS\/MsTKKotUTaUzran","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8d59AADYRn2xbbBAEwKgBTQIaWoYAaK5b3EwAKRVlt6y8I22p7aDVl2M7tZku94NihPZzTPDPHOWDg2SL2IdMTbV+ifiPSEum1EGLEILUF03Silk0M4dCplYXXkqAwfLcaT8czhBSW7JPk3FP07Zjf1VrX\/EhA7PS","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0501{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8a3tAADYRq5NbbBABwKgBTQIPWoYAaANH3EwAKRVlt6y8I22p7aDVlwZ\/lr0pb5\/8OHWmjWpVGAC6aWnFO9YZe0AabMk9tAYNdCKm7Lc0YZSIQXd727arotbjGcPuNpZm7jwb0JEwc84e\/kUM82vy4cMNF9kPKTWE","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEGswAAEARNnfAqAFNW2wMBVqGAgsAMDCY3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/943nQWDxq3YQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0445{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEHCcAAEARMSDAqAFNW2wQAVqGAg8AMEmM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/TUthfaCKCpw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0445{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABETBQAAEARBTPAqAFNW2wMAVqGAhgAMAJx3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8PlXSk\/DdhHQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0445{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE99IAAEARXW3AqAFNW2wICFqGAhoAMM8r3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/QKrUqs6nfyw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE+FgAAEARVOvAqAFNW2wQBFqGAhoAMBPZ3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8nPeBPB4O9EQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0476{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0qlAADMRT35bbAgIwKgBTQIaWoYASFnk3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe0Cq1KrOp38sAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0476{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcd7RAADYRn3dbbBAEwKgBTQIaWoYASJ6R3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJeJz3gTweDvREAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0476{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABca45AADYRq6BbbBABwKgBTQIPWoYASNRE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe01LYX2gigqcAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0479{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":122,"pkt":"KDc3AG3I8KNaMBgSCABFAABsRZ4AAEARsRHAqAE0wKgBTXr4WoYAWPxjToIQs5m5XoZB1qDehmfhJomQUeopOlZuJIIaL6qE8BgtmXQ6sqxHJAacGMTU5S5RgUjUPrOpUP\/aPObI3ORz5PRGJjnynufzdcsxdb\/ZTPY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14} +0432{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":90,"pkt":"KDc3AG3I8KNaMBgSCABFAABMydIAAEARLP3AqAE0wKgBTXr4WoYAODsLYp5\/+zyBsvkbXdhL6ARsRe5epV49Ib962s33xAud4j+fNlcVTYsLIrX00azPg1oy","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0457{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":106,"pkt":"8KNaMBgSKDc3AG3ICABFAABcuJYAAEARPinAqAFNwKgBNFqGevgASIwMGSklPzXEo+xeYy1+GF45Fj8LUGSCCu60WiiFqxLSO5M49NhltbcBCfe+3gJzPDxoeAqeJPaj79I+oze+Y3DSMA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0431{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":90,"pkt":"8KNaMBgSKDc3AG3ICABFAABM2MgAAEARHgfAqAFNwKgBNFqGevgAOHVzLDN7SsFyWuK6F0tpc5OATWnzbEU7qCpTN1Xozj8qtDOuKYxZPvphz9N0EPmGit2J","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0431{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":90,"pkt":"EBMx8Tl2KDc3AG3ICABFAABMg0kAAEAREJTAqAFNVwvNw1qG7TMAOE0OU2RiXNjy8sJRKs8KhnTyEy6Nhnt95vQlharNkBkXr2lvtMgl2dlHhYY4WvPjXQkp","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0459{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":106,"pkt":"KDc3AG3I8KNaMBgSCABFAABcQqkAAEARtBbAqAE0wKgBTXr4WoYASPszoQUCF9P7scTQPabFpgbA0VyPrQrjBdPkNrzYYnOrrtS8RRJbPFmnTpzV\/p+26\/mmrLK5EkJB2QBg75XmqKGTLA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1588779619914,"flow_last_seen":1588779619914,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp"} +0427{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779619,"pkt_len":85,"pkt":"EBMx8Tl2KDc3AG3ICABFAABHqTUAAEARTdLAqAFNwKgBAbgXADUAM25TALgBAAABAAAAAAAAA3d3dxFnb29nbGV0YWdzZXJ2aWNlcwNjb20AAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14} +0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1588779619914,"flow_last_seen":1588779619914,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"www.googletagservices.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0449{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779619,"pkt_len":101,"pkt":"KDc3AG3IAICPmq69CABFAABXwqhAAEAR9E7AqAEBwKgBTQA1uBcAQ5UvALiBgAABAAEAAAAAA3d3dxFnb29nbGV0YWdzZXJ2aWNlcwNjb20AAAEAAcAMAAEAAQAAAAAABMCoAZ0=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14} +0679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1588779619914,"flow_last_seen":1588779619916,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"www.googletagservices.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"192.168.1.157"}} +0629{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":234,"pkt":"KDc3AG3I8KNaMBgSCABFAADcfG8AAEARedDAqAE0wKgBTXr4WoYAyKTrFri0AOIdoUF8HgC1gBiBR4WYAW+Y6ixI\/CimmbnvmNPc+7RWqRDiYYB5BtoNOZ+GYknJLF6vnmq\/vZVQVX\/qPiXfvr596tV5ihbzsQEUXujBr6CW5Jx7mLZKATUjQZG4pqkScDCtoGFYwLbXUskyWRSbrC6hy+uBu0qPmfd4SD\/7qckjnc8v4qbewk41c5gifJqMys+k7q5JK0Iwk8+BFQhZBUejZZ6XcaO0DUWhA3vqRiw7b6ii7Tnk1Hel1Nqd","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14} +0674{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":266,"pkt":"KDc3AG3I8KNaMBgSCABFAAD8M2UAAEARwrrAqAE0wKgBTXr4WoYA6OlehgGD1Gs0b120gEqf\/nK6f5WdQYejVzOsfJQlZP1AA6F9i0G7vZx1n8e25\/f5Mg3Jxah8nNc1tpxpe\/hy5cvvXVKXhfzXSLG1Qs8LShdTAgKPSWKnJDG+WOm1vZmRgd1Fi6ndcEV4W69AKGJdSjWzqB2FMtgvLbL75OcZDujIR2L6+0iE7z9X0+MJRjiEmby2aw0x8v+3mcowSs8zThHH\/YXo85JS0WXttk3c7nWNkJTbpXRKOSjL6vZwlv27BEWBuawzbbdbMQbuJj7r8dESqiyUArN7hdiDWj\/hscj136s=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14} +0693{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":282,"pkt":"KDc3AG3I8KNaMBgSCABFAAEMW60AAEARmmLAqAE0wKgBTXr4WoYA+BFfLsDgPR+aI0jSmDeUwtyB2xUsT4BFGGcaH00QmXPwbTrfpMgsc5AFbeWTFhj50GiOMhjqhcxWRVD1a5b3PE53mT8NyoSlP80Z9AfMMyDTBtzFX1Zb5T18rhJNznSbJwRwMxKMQJlFd7U7yyptA46tU7ICSikqYFU6C\/HoJbvjNUIdP7NxZQQ4THckr2o2NhcBPqHLYNfMbjACd5hNPNrUai5y9Yb27TnsHBAeqmUL\/EpdipPTlGxY65\/wQFQiP9mrcF8pvutmbHhwhtyfXetd+bmrGzGSy3SZ+qTszdMo+XnEKdOPdC9JaZjlpY3MCcQh","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14} +0675{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":266,"pkt":"KDc3AG3I8KNaMBgSCABFAAD8VjwAAEARn+PAqAE0wKgBTXr4WoYA6PhNExkwSl2Pfa2L2V5HIhoB82Z+\/n+RtWmsJE0ZovpYvJaWUH5Wi\/8HX++L2m9amkSpE02x43ern6KiF9OaiRspZ5unFrhsZUfHaddWsfvGKuhXZJeOl+ZvZIfjsaIQoIgJvzKSbrap+0OSWgNwyhqGX8n330cqP4hHbMQDF4adwah3w8C5r4KEoXgOzoC84eX1dr1XNRV\/ic5gkkx+kRV4doJ1\/m1JAFCtQ2zpEqwUCvOCdDsITJkCH34EvZzbH9KN40jpBZ1N++lrLFE94J4l41tFcEAu\/c0JivVlkdAp4lk=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14} +0676{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":266,"pkt":"KDc3AG3I8KNaMBgSCABFAAD8DugAAEAR5zfAqAE0wKgBTXr4WoYA6Hw+f5YAG5Tev5aNfoKjCPqJZQUVurtdk62nD\/1\/prtPCnst\/in3Kzbb4DWNn1SyoIDETKOP6ebVfXlEwRK1YTk6PvwbWSTQ5C4+DI2dpOkII8+LLKSej4JD7YJFht4uSSk5xxJG6J\/ZVVqpNDeAIhmxCAKq8ziJZj0z2LtQ4twYwe+4uO4wvhCyeS5eEuBf4OdWj5mKKgDGCEjZ9mor6f1F7vdit9jnrNRI\/GcWTUk9t2o0Q6I5BXQ8bkovVOPLjIPPTIHXc+uQTwqmV\/yji6aIJIHpVd8bjBy4TjP4LPX2LfU=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14} +0658{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":250,"pkt":"KDc3AG3I8KNaMBgSCABFAADs4PwAAEARFTPAqAE0wKgBTXr4WoYA2GAFaJT7y9OwzkYFz+4\/fu32Clo96XsqaeX99ii0K5tZAhSCwV599PnV03D5aBnbESEyT0pxBbSbXxu1zi7zVChOt\/OPkZrZX9Acgevvz\/h2JRMGunbkyzfWVvxGUAcLdayGwXw\/jUpqNgzYt5rIGsOLMgpkX3huK2jFrPwAQhbcL3PnSKroJpcRGDgXwghqOpgOZvPODachR5oFQp6HXIvSw+6sC+SwKHN99AR3ETZZPzluj7hDvZBxA6h2\/7nf0KG+\/H3B01BAGZS0\/nLhyblW\/Q==","pkt_caplen":250,"pkt_type":2048,"pkt_ipoffset":14} +0610{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":218,"pkt":"8KNaMBgSKDc3AG3ICABFAADMZvUAAEARj1rAqAFNwKgBNFqGevgAuJMYkbG\/KIwIwQnayLD0LMXcqEj4lfZ8P9V2iOgexzXB+FkyVtJQfJJnKJmRVHq7SYjBzTc81jea\/W4JIV63if0rV5VmSeagRTwkiWOdGd9o02IQOA+PZJoz0lbdO4rIb8YnZr2XoGAdftw\/Xvcd7TrER6tHinrYdVg4a727UMkOFw96i+NaQr+lRQwgZr4Zf8u+FORrz2a5CnGe4doPuGXE8geBfZgxu\/1NsVKk2aHZjlE=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14} +0633{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":234,"pkt":"KDc3AG3I8KNaMBgSCABFAADcPBYAAEARuinAqAE0wKgBTXr4WoYAyD7zXC3NU7wX1h\/h\/kWcJ8qpQmiUN4mhou4JHo77YBPu7\/VIjDsoEmtNSaKDnbUdu9rsQvahuCrdo6qM8+WBlFmUqWfA9spsOUDbGhwiOu\/lCsyDdexur637pbnJEdrQnE5HC5ssaS6AKLWy49YhWHXZpaKXSUEpzSC6ItBDxBR3fKHkGB5NVGyHr8\/h4eaV5mQuKkaNSXZCpy8wOZWWvDRFDXwW4QKX+b0Qm\/U5oaRB0uDYUq\/aULnstigk7puyQYRj","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14} +0754{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779621,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJpAAEARYHfAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAKhEc1gAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1588779625981,"flow_last_seen":1588779625981,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"} +0862{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779625,"pkt_len":397,"pkt":"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","pkt_caplen":397,"pkt_type":2048,"pkt_ipoffset":14} +0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1588779625981,"flow_last_seen":1588779625981,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":""}} +0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1588779626393,"flow_last_seen":1588779626393,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.43","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"} +0647{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/BJImXJc1CABFAADlSCQAAIARbWnAqAErwKgB\/wCKAIoA0XdaEQLkXsCoASsAigC7AAAgRUVFRkZERUxGRUVQRkFDTkZDRUNERkZFREJEQ0VIQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoAREVTS1RPUC1SQjVUMTJHAAoAAxAAAA8BVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14} +0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1588779626393,"flow_last_seen":1588779626393,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.43","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1588779626394,"flow_last_seen":1588779626394,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"} +0444{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABOW9EAAEARmjHAqAFNwKgB\/wCJAIkAOrFARg4BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14} +0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1588779626394,"flow_last_seen":1588779626394,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}} +0444{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABOiakAAEARbFnAqAFNwKgB\/wCJAIkAOrE9RhEBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABONx8AAEARvuPAqAFNwKgB\/wCJAIkAOrE5RhUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14} +0754{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJtAAEARYHbAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAOKuuvkAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1588779628757,"flow_last_seen":1588779628757,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp"} +0411{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779628,"pkt_len":73,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA7n3IAAP8RmKDAqAFNwKgBAcJkADUAJ31bFnMBAAABAAAAAAAABGRhdGkEbnRvcANvcmcAAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14} +0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1588779628757,"flow_last_seen":1588779628757,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"dati.ntop.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0477{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779628,"pkt_len":121,"pkt":"KDc3AG3IEBMx8Tl2CABFAABr7g4AAEARCNXAqAEBwKgBTQA1wmQAVwAAFnOBgAABAAIAAAAABGRhdGkEbnRvcANvcmcAAAEAAcAMAAUAAQAAADwAFBFtYWlsLWRpZ2l0YWxvY2VhbsARwCsAAQABAAAAPAAEp2PXpA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14} +0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1588779628757,"flow_last_seen":1588779628804,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":39,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"dati.ntop.org","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"167.99.215.164"}} +0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1588779629044,"flow_last_seen":1588779629044,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp"} +0407{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779629,"pkt_len":72,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA6m54AAEARW3bAqAFNwKgBARa0ADUAJpvbsPwBAAABAAAAAAAABXBpeGVsAndwA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14} +0639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1588779629044,"flow_last_seen":1588779629044,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"pixel.wp.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0431{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779629,"pkt_len":88,"pkt":"KDc3AG3IAICPmq69CABFAABKxbFAAEAR8VLAqAEBwKgBTQA1FrQANpjhsPyBgAABAAEAAAAABXBpeGVsAndwA2NvbQAAAQABwAwAAQABAAAAAAAEwKgBnQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14} +0653{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1588779629044,"flow_last_seen":1588779629045,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":38,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"pixel.wp.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"192.168.1.157"}} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1588779629079,"flow_last_seen":1588779629079,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp"} +0423{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779629,"pkt_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABFpC4AAP8Rk9rAqAFNwKgBAdVDADUAMZzqakQBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14} +0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1588779629079,"flow_last_seen":1588779629079,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0754{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779631,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJxAAEARYHXAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGALnIwr0AAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0452{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779631,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZzLkAAAIRSQLAqAE14AAA+xTpFOkARfrBAAoAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14} +0607{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1588779596464,"flow_last_seen":1588779631710,"flow_tot_l4_data_len":689,"flow_min_l4_data_len":53,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}} +1001{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779632,"pkt_len":506,"pkt":"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","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14} +0997{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779632,"pkt_len":506,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAAHsvq0AAEARNbfAqAFNwKgB\/0RcRFwB2JlBeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiA0MDk1NjMzNTA1MDQ3NDIyMDI0ODQ4MjA1NjAzMDgyNTQwNDYyOSwgImRpc3BsYXluYW1lIjogIiIsICJuYW1lc3BhY2VzIjogWzUzMDMzMDEyNDgsIDc4NTI2NjE3NywgMTUyNjI2MzA0NSwgMjg1MjE2MDcsIDE0ODE5MzM3LCA0NTE0NzI2NTgsIDczNjM0MTUyOCwgOTM4ODEzODQ5LCAyNzUwMzcwNTYwLCAxMjY3Njk1MTA5LCA1NDQwNDA3MDcyLCA1ODM0NDk5NiwgNDA1NjQ2MjU5MiwgNzA1MzYyNzE4NCwgMTUyMjE3NzU4NywgMTQyMTExNDM5OSwgMTI1MjExNjQyOSwgNzA3OTYzNjY4OCwgMTc2OTY0MzA3LCAxMjU1NDA1NjYsIDEwNDc0MjgxODksIDQ3MTYxOTAwNDgsIDU0NjcxNjMwODgsIDExOTUwNDQwNzEsIDk2ODUzMjI0LCAxNzYwOTk2MywgNjQ3ODMwMzQ0MCwgNTExNzA2NjQyLCA2Mjk3OTU1MTg0LCAxNDE1NjIwMzUwXX0=","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14} +0434{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779632,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABES\/gAAEARqizAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0452{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779632,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZVrUAAAIRvwbAqAE14AAA+xTpFOkARfrBAAoAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14} +0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1588779634762,"flow_last_seen":1588779634762,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":61974,"dst_port":443,"l4_proto":"udp"} +2173{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14} +0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1588779634762,"flow_last_seen":1588779634762,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":61974,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"www.google.com"}} +0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1588779634764,"flow_last_seen":1588779634764,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":50822,"dst_port":443,"l4_proto":"udp"} +2173{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":1392,"pkt":"EBMx8Tl2KDc3AG3ICABFAAViUS0AAEARvOnAqAFN2DrNRMaGAbsFTkE+w1EwNDZQdSQ0JxgV+\/AAAAABpTtWGWoI4a2O5woGoAEEAENITE8ZAAAAUEFEAPUBAABTTkkAAwIAAFNUSwA5AgAAVkVSAD0CAABDQ1MATQIAAE5PTkNtAgAAQUVBRHECAABVQUlEoAIAAFNDSUSwAgAAVENJRLQCAABQRE1EuAIAAFNNSEy8AgAASUNTTMACAABOT05Q4AIAAFBVQlMAAwAATUlEUwQDAABTQ0xTCAMAAEtFWFMMAwAAWExDVBQDAABDU0NUFAMAAENPUFQUAwAAQ0NSVCQDAABJUlRUKAMAAENGQ1csAwAAU0ZDVzADAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS13d3cuZ29vZ2xlLmNvbapsx9TSQuPwh8YeJs33Nmze8URvGPZoGeJQWhFImAF+FKGJcZ5Gv+AWggZjhNIH2DzcOgKswVEwNDYB6IFgkpIa6H7tgIaiFYKRXrLacjAwMDAwMDAwTrr3TE8EhubDtCHdJzdVC1d+PPBDQzIwYmV0YSBDaHJvbWUvODMuMC40MTAzLjM0IEludGVsIE1hYyBPUyBYIDEwXzEzXzYriYKzggSKpsC6slaoCl0fAAAAAFg1MDkBAAAAHgAAAIbXL08ZJ3aJ+3OQ3+Rsvbic8DCd31+92QlBmAfJ4ZcgyovDvfnINbPNV9UIgMSv\/oTfYVDM1unv0Eg0xlJTYVZkAAAAAQAAAEMyNTXvR+qpngpSje9H6qmeClKNYDLLkqBBTd8GdwAAAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14} +0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1588779634764,"flow_last_seen":1588779634764,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":50822,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"www.google.com"}} +2193{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14} +0409{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":70,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4emwAAEARmNTAqAFN2DrNRPIWAbsAJN5oQKM1SRNfSpcJAg\/VJy\/hU5JXfMk208XyiTI7oA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14} +2203{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":1392,"pkt":"KDc3AG3IEBMx8Tl2CABFAAViAABAADgR1hbYOs1EwKgBTQG7xoYFTqbf01EwNDYFdSQ0JxgV+\/AAAAAB\/upOH6rH2BIyQSeP5oglrVNRjLzUPYUddHT9m6BsmcKmApdlysrOkxHuxx9vijlyM8wYkq7JvX19IQMhKJZA0U6a8sLp7rHlGFo5nqmm0jMnW7WPHt\/LNpmp9sMej9LIYl7HVWlYuGONw23gJgIuAlpWAO6yh+eVnrhPvfDTj31c6\/L1ooPLrq5NV7Gc7jNhPXAjTc4ZaIElGMpTUieuhBDEobdC\/yRUwhIJac7BNwvPjcF+IDwdoZlLRJw3R5oXAi2b\/NF4EAf1KMRYvNmplcTy11GLuiSvRAmihe5Rh\/orc2nsZbWj+vVmUmzCiWHVssa5KLzmBbkyMh6lJPB3gwNR9L\/Fq9yeGKy0+1JnwE4BdYx5u8HLnX2wgYVFT\/rFfn1Oc62CdMeazmAG7K4pybekkUnanBSVSlDsTtacnk6lBahTKCPl4BKZo41FpeNyrCv6CdLYcTHgeBE4YGrMXUeFT\/ilVEPrTMzFe5kzHIStA3AKnuB\/P+S0D02eLWMotPjv93++mmxST6HP114UWR5QNEIWRxUS8RL0hQeu4zY97Ng6cw4CKN+Csj\/ZvkP4kxD\/Zq7tP6yj9mYvYIO9zExfP9oeGiwS\/4f+6unIp0FdFoZmq8bqYOIOw8QtYVOoNnStryjcigG\/awK2ZaMXV+46Pnbc7phNOyTwsLBxxc\/12QJJ45cSQCeX9fI3HOGC6Lef+EyN3wVq9oB+wBoxI5umm0icT\/zZ2yvFo6UFJ2uDstyecW1AqbCfnn6WWrQLz6eMr+vL\/JleVbbatuBYa5gdk2Yt+67fkdck3Dk3mkph8oGaf+SDkR7Tf9p8ulHM4RwOnQJFlNf4xkSWeQGBLD6wjBE4rkLONEpat+rbynMjiBPAofixsPnISwVDLf0nq9DMrjUvdWlIIMyhGej2e24qnTkMu6p7FC\/huIoB0mRmYhHnBPlCQn\/LUzArFEcNys29X1cxw25iplZFvHkHdOc24AY5G54G00MdsxNdaE\/paJZz93dfFlaEUpxXdsPnTzUS4pfi+tXdLdZlCDSCbcoeLXsZ10o3zvR7bkNwPdSYObv6FtEohnNHd5N8A7GThnHg9zUXltLPSF3xHvq8673iVUYgBtPyG5IX44udpmQI7jeus04VvFTz2gu4npRTD34iJ0hoN0ntT0nFkqcX5\/lL09qWjNDuFP\/S1ls4UAok+2ha5s3PvhtAKIlco7aoWYLrSj95gTSsEvt+vv6BHLLnycSfEmJgy7LNVNyoUK4C4+9WgT1JfWOmVbGaY23xkwzP15QjiTTdKIEkJwiBmgJIruM0dA1J41jJPUcFpH8opFJyrh1InbMhpwrdsem5Er87sEkX0BhYPXkyvKucSZm6W1RMofNDgCdyw5TOBfDKdoqNmc54r82qBE2FvdTks67OsedSUGg\/xIKev6elshEbqcaKfcXRRyuerRJ9Na1ZC85buNS0\/0S8Uk1MnuNcWLIniDOgLmxDYioY8+6ffXPskGoeJ6mpsWIPFN\/ZXPivRS+0hFla3abk42RYHrYiht3fXvADKY3mvEEwWMSzU84L2ho8ij4vLNJYBjTvbpsEkPGMqANA85Spe5XJ9p4g9hQurfHWfSLDKdhStCgrn8jpcM\/\/FkUBZViwdPAW2JLOvsdSXQXeDGKI7nTEgI0kYpnr4frOKaPCHqb3HEqFHSRiARTSD0ufyxhTd6AYnG3WyBQ7hHD\/6lTnreRmZxISZ6q\/gFRJTubvR8\/BO8IvV1XaeMgD55oE\/mi7ALMHyuc8OmMt","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14} +0407{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":70,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4M8YAAEAR33rAqAFN2DrNRMaGAbsAJKIhQHUkNCcYFfvwAo2OXEY+ceV4qFvU3oSjW1YxGw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14} +0434{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779635,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABE\/3cAAEAR9qzAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0754{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779636,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJ1AAEARYHTAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAMgSJqsAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1588779636498,"flow_last_seen":1588779636498,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"} +0439{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779636,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABIkKQAAEARZWTAqAFNwKgB\/+EV4RUANJmxU3BvdFVkcDBukus1wI\/JPgABAARIlcIDfp+BivWMmwGHLE6mtUd\/uj\/4zNc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14} +0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1588779636498,"flow_last_seen":1588779636498,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":28150,"dst_port":529,"l4_proto":"udp"} +0442{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABETKwAAEARCJTAqAFNW2wICG32AhEAMEyhL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8Sf7Krq21RXQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":28150,"dst_port":529,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":28150,"dst_port":529,"l4_proto":"udp"} +0443{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEp8EAAEARpYXAqAFNW2wQAW32AhEAMJ\/zL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9gDcREEDsyHQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":28150,"dst_port":529,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.3","src_port":28150,"dst_port":530,"l4_proto":"udp"} +0442{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE6yEAAEARZiPAqAFNW2wMA232AhIAMCHWL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+2+xugMe3kOw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.3","src_port":28150,"dst_port":530,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.1","src_port":28150,"dst_port":533,"l4_proto":"udp"} +0442{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEy+YAAEARiWDAqAFNW2wIAW32AhUAMEz1L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+LrTXW6BYYCg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.1","src_port":28150,"dst_port":533,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":28150,"dst_port":537,"l4_proto":"udp"} +0442{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEayUAAEAR5h3AqAFNW2wMBW32AhkAMN01L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+U8S0SsiW5Mg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":28150,"dst_port":537,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.3","src_port":28150,"dst_port":537,"l4_proto":"udp"} +0443{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEEQsAAEARPDrAqAFNW2wQA232AhkAMF6eL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/Ppp3gSInx5A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.3","src_port":28150,"dst_port":537,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}} +0423{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABF+GQAAP8RP6TAqAFNwKgBAdVDADUAMZzqakQBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":136,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB67hUAAEARCL\/AqAEBwKgBTQA11UMAZgAAakSBgwABAAAAAQAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAHAGwAGAAEAAAA0ACkFZG5zZG\/AGwpwb3N0bWFzdGVywBt4ZvNkAACowAAAHCAAJOoAAAACWA==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14} +0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":32,"flow_packet_id":3,"flow_first_seen":1588779629079,"flow_last_seen":1588779637572,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":49,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":1,"num_answers":1,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0474{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcg6JAADMRnoxbbAgBwKgBTQIVbfYASNOVL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJei6011ugWGAoAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc3cdAADMRRGBbbAgIwKgBTQIRbfYASNNBL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJeEn+yq6ttUV0AAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcuRdAADQRZBVbbAwDwKgBTQISbfYASKh2L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJetvsboDHt5DsAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcJ6tAADQR9X9bbAwFwKgBTQIZbfYASGPWL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJelPEtErIluTIAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcTfZAADYRyTZbbBADwKgBTQIZbfYASOU+L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJez6ad4EiJ8eQAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcdalAADYRoYVbbBABwKgBTQIRbfYASCaUL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJeYA3ERBA7Mh0AAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1588779637830,"flow_last_seen":1588779637830,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"239.255.255.250","src_port":52127,"dst_port":1900,"l4_proto":"udp"} +0606{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":216,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKg14AAAERg9XAqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14} +0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1588779637830,"flow_last_seen":1588779637830,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"239.255.255.250","src_port":52127,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}} +0442{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEsZEAAEARo67AqAFNW2wICG32AhEAMJEzL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9ywagRVgIMjg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0445{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEUI8AAEAR\/LfAqAFNW2wQAW32AhEAMO1PL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/cV+9m8\/VZmQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0443{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEfdIAAEAR03LAqAFNW2wMA232AhIAMLZjL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/DysMOlAk5VA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0442{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEXu8AAEAR9lfAqAFNW2wIAW32AhUAMDI9L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8VVGaWhdbamw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0442{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE8IoAAEARYLjAqAFNW2wMBW32AhkAMMg9L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8fmAjwvVRcdw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0443{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE3R0AAEARcCfAqAFNW2wQA232AhkAMFmIL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/13zLCZd4eiw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB83fxAADMRRAtbbAgIwKgBTQIRbfYAaLiFL+Sfp2xOtDPLzYKhu+piHsTJVQwtNQlN5BjrDFQS63ir9AxZ6eNFS99WQx\/aOquz913+WwsnsswlDvf7Dmn7fMUyoooiE0QiDgwcFtMOy\/TtVJkmOuKmka12UJawVN2u","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8g+xAADMRniJbbAgBwKgBTQIVbfYAaHl4L+Sfp2xOtDPLzYKhu+piHnNPvYpjojp\/MkUX0QWeuZLAgji5i60Q+QHWLARg0G5fOv6FKKcMY3G4W3IWnOIzWj8D57+vXqqgwp09rhgcqGRQHhvivW5XGcu1JpjHL+eY","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0497{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8ktgAAEARujTAqAFNW2wQA232AhkAaMjtL+Sfp2xOtDPLzYKhu+piHqRlzisMf4epbMc+wcg5TeSmixf3Vxk3wvxjgyFyv0Z7CHXwxlE7sAOR+Xd3ZilpdEsM9seQhGDpGfjow6wonpt3GiYLy5DQqsXK+J4Fo5v8","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcg\/JAADMRnjxbbAgBwKgBTQIVbfYASLfdL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeFVRmloXW2psAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc3gBAADMRRCdbbAgIwKgBTQIRbfYASBbUL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJecsGoEVYCDI4AAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8rugAAEARph\/AqAFNW2wICG32AhEAaKqjL+Sfp2xOtDPLzYKhu+piHuViMv91uB2\/negp9kKpn10UMc4sI3CyLAm+6EO6izNmNxZ9T8tg8uzkP1BVSkfGJAo8VrIdgFn8zPE2iiS7fCcA8nWMS0b55B7Rfmo7l6va","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Q98AAEARCTDAqAFNW2wQAW32AhEAaFgsL+Sfp2xOtDPLzYKhu+piHsc6f+bfCWoRx7YPLNItPOBSZeaSGE3rAvB\/juDHZ80lS3RT6Vfnq1UK0W7DVLOsLPsLuTVeeopIPqyq262hA0DgzZBAWkTLEvHgaTG77uS5","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8iMoAAEARyELAqAFNW2wMA232AhIAaBGvL+Sfp2xOtDPLzYKhu+piHnsMeqhipGeCzQpwseCFn9\/BUTvW6IhCByDgDBviv9688iQOHSod13zlhIdeO18K7PHtib3\/95b5Pr5fzpkkUOD3KCaKBGwy202dq7GZPiuN","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8C\/EAAEARSR7AqAFNW2wIAW32AhUAaNWuL+Sfp2xOtDPLzYKhu+piHmiSsbI0NdV4Geqrhj2DBqoK\/kxYd8gzavjbOn690nNMI7srHBqbyi5F9y2D5mIq\/VNDmLKsgrbzzSTi5J8p1YExDKOCq7J2E6Ci7f9Deq3Y","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8OCoAAEARGOHAqAFNW2wMBW32AhkAaCAKL+Sfp2xOtDPLzYKhu+piHkEXFxiOVNxdGlAtuHnoS8DpH5FA43RGq80i7xa33IS0Nas1Cb7yrFjCtj\/HdyRB28q5jwSyZOZuAQrNrzzkZOerIfmZ4LSn5tED\/NYoVGMe","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8SIwAAEARBIHAqAFNW2wQA232AhkAaDmQL+Sfp2xOtDPLzYKhu+piHqjUPT2SG0sq4F0kESGrEqRjaNWHkRv03hQwbxqih34klV3fT5PI1MmnQHQbSTlEhEz\/ZMEIQ6My90Tj\/\/SkZkzsOMJP6LQEXDzIBfpQ3iOc","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8J+BAADQR9SpbbAwFwKgBTQIZbfYAaH9tL+Sfp2xOtDPLzYKhu+piHnNQY7CI\/E1es6vcQVGg+RiNimGfmNmJeJPHiDsAWgK3UlEMVUvV2W\/OEsVub9CJx2Tp4lpSUwngx6iGuqnGzLipn4rnbnfLBQmnqXpC7fOu","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8uVtAADQRY7FbbAwDwKgBTQISbfYAaCwhL+Sfp2xOtDPLzYKhu+piHvAjMoWu\/hyR9QDJx47jb+LNbrA0ledOGk6Co9jx4rm5gXR1VPJTeL45LxXcejZXgjT7Uxeagur1Z25sjtt5Y3qABQT5y4p4O8Qob8Tp4af1","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB83gxAADMRQ\/tbbAgIwKgBTQIRbfYAaB5dL+Sfp2xOtDPLzYKhu+piHv9QqbQ16nhxxN66tig8GqhWD3Q1yChaoqTnnabmIowJGm0AFG69H7tIcNnwBLTISNltF+C3Zt0Wm5n0cvpulzn8MhC+gAV+hCe4IrnCZNr6","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8TjNAADYRyNlbbBADwKgBTQIZbfYAaNqGL+Sfp2xOtDPLzYKhu+piHi473ek5HMA6JY5f9MtQXQVoS1Gxk9kHGg5N7qWf2fwuLlYZGz3eXHTcnt3xKWT59dSZxBEYGQ13+buO5mb\/i5MPlAaMl+ujqSYoHS+K53BI","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcuVxAADQRY9BbbAwDwKgBTQISbfYASDwEL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJew8rDDpQJOVQAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcJ+JAADQR9UhbbAwFwKgBTQIZbfYASE3eL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeH5gI8L1UXHcAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0431{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8Oo4AAEARGrrAqAFNW2wICG32AhEAKA2nL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0431{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8SccAAEARA4jAqAFNW2wQAW32AhEAKAWuL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0431{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA85acAAEARa6XAqAFNW2wMA232AhIAKAmrL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0431{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8K8gAAEARKYfAqAFNW2wIAW32AhUAKA2qL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0431{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8H38AAEARMczAqAFNW2wMBW32AhkAKAmiL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0431{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8LUEAAEARIAzAqAFNW2wQA232AhkAKAWkL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8depAADYRoSRbbBABwKgBTQIRbfYAaKg2L+Sfp2xOtDPLzYKhu+piHnpBSFbhYlk4qNsRtTdcxwAdJrPggJSWIC79FOIiZ\/6MKu7YAIFh2hpzJksbk6sn6pnFOcE5E27FnD+zi5b\/rvv8Dn86kJUmkW3jHAGRBCOF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcTjlAADYRyPNbbBADwKgBTQIZbfYASN8oL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJe9d8ywmXeHosAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0474{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcde9AADYRoT9bbBABwKgBTQIRbfYASHLwL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJe3FfvZvP1WZkAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0609{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMoVMAAEARs2TAqAFNW2wICG32AhEAuCSIL+Sfp2xOtDPLzYKhu+piHny6aucbHAI9JHjeHEAkL2RcXApzRroDB8spH44S75VAvVgbogdJAhEmts1RmmbsBZEeYJxl+ktDJBwfEJnR1rfpQVOCEfsvQ9PgC7qcyC+uizK6cPth\/4jiII\/CWq8qLkqVVb1Pl7Y\/JLEPDQjUNXNQE5sav+U7KoXEJro+6+4YXsj\/ujkwrlSltXlvTy3mrbbc8GJpTnHFcea3TU42q9w=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14} +0609{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMTzEAAEARBYfAqAFNW2wICG32AhEAuPEHL+Sfp2xOtDPLzYKhu+piHqgEx70pqnVJa86+6IVczt7obdxSQ2+xM31+4DykqNw7zmBVFcGGXzo+ktYEcdynJhJCMSCQQuxPMdBSUUnKA9T3T43thL4I5JqwItoC\/clRuThOyV7JAFfZ5k06XZ0vPW+rPyYkcdvH8J5cQkEzgUDunbd9VOp\/EbMvwhWRoMD\/Y7hlm8oFYUsLpQAvrArM3zIlsSOx6fIAIxcS+ddjLA0=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14} +0611{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMQiAAAEAREpjAqAFNW2wICG32AhEAuCqhL+Sfp2xOtDPLzYKhu+piHvFFT5wdF\/mKWUTnucx2klwjUm00gH4Q\/RrHft5E4ArM9UOBK3x57ULXR\/uyX3\/ru+vuxs7508mtLDPrsl4T2J2PcmMpUDcKHnfEKVHjzqCJhN5jpts5R65osZytg0+kFZjbLqw6PJ05RFRr27q9EuvFM9sVTJzGqa4S\/Y5LX+2pMQBDs2GvuM5mlKSOicfk+AYnB7j1UrJl3wwCQrfOZJc=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14} +0629{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":234,"pkt":"EBMx8Tl2KDc3AG3ICABFAADcu6wAAEARmPvAqAFNW2wICG32AhEAyDzvL+Sfp2xOtDPLzYKhu+piHseiTMirGxVEOYwt4aZRHWnrAmVA7DrWJc7SLpO0\/Ggy2y3zzkldKIjubWJM\/BRmQ0kk2jqOeShgbiLHvBXGEn8NIBseWxP+2JLj4CISHgwvdhGlGZ8pcL4JZpAZLYhLVi+eQjp8CAHK4PTrAFrDVrBr6DTvGge14H\/YYWhtbyEcAJqmHmuLFiDoPQueNxpLiPVQqebojVW46Vdb9ZVg8BiQphbLcCTI5gdWW8pm5+W9","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14} +0612{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMU+cAAEARANHAqAFNW2wICG32AhEAuJ6aL+Sfp2xOtDPLzYKhu+piHibjh\/SNdP7fTojC\/QCOqQzdbB7t3r8WOGti5bv1cwmOmeDYZ7QpDkqnOJtljurU\/2TC2oC1gkghmR5\/nHNG7rskJ9I1sDm5epWnapB\/nubh9vAR1qub8qNWbANxoKlsQq0ZjnApuGXMRKh+KuZq8yGtyuZVdaxApiGpYKqd96Cf+aq\/iBHdrAOgJ8dsPrVjs2DXBbLRH5st4EcrXoIseiI=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE8sgAAEARYnfAqAFNW2wICG32AhEAMOljL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/9cha7rRBj9A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0442{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE4D8AAEARbQfAqAFNW2wQAW32AhEAMMdtL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+371u+lwCUgQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0442{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEXjcAAEAR8w3AqAFNW2wMA232AhIAMOTfL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9IDwLUV1uDfA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0442{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEevAAAEAR2lbAqAFNW2wIAW32AhUAMMPbL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8EIOHhyLmcAg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0442{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEoW8AAEARr9PAqAFNW2wMBW32AhkAMAnQL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9s6cXs2eT0Bg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0442{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEkjoAAEARuwrAqAFNW2wQA232AhkAMIk2L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/93DJMcVXsduQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB83lRAADMRQ7NbbAgIwKgBTQIRbfYAaF5PL+Sfp2xOtDPLzYKhu+piHmhw98SQt3CCpdK36YNs9EtYXS4Hh2qvneJyMgMDwi4WWB+RGjSF\/1rvFbhAuieTcnEHcoxS2jgUCR9f+LXvhFUha4p6t5d1BlO9YugEyLxc","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8hCZAADMRnehbbAgBwKgBTQIVbfYAaP9sL+Sfp2xOtDPLzYKhu+piHrlKKjndr67tpOy3Kou6g3jhJ9GnPqKZTQe3r2i2mTDvyJMRVVjQGtlBidkcDN1v4knZSfhk5Wot0O8aJYPT\/DnBsvFev03MNlon6fXHuwt7","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABchCtAADMRngNbbAgBwKgBTQIVbfYASEl8L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeBCDh4ci5nAIAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8iM4AAEARxEDAqAFNW2wQAW32AhEAaBntL+Sfp2xOtDPLzYKhu+piHqKgJ+oCHBcjSJKKr5HZ4cmuIzZ5QU1br1rn0N\/Ysdssz0nVW8FXgvHUEbTjdJnDYzS\/xewOHIi8YGrS8jiAywC1h59wqUyLo+kAOJ+YWKks","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8pyEAAEARqevAqAFNW2wMA232AhIAaEMXL+Sfp2xOtDPLzYKhu+piHt1BgncZjBvyVVx4ivH7OCSEnAO3Dxu+u2aejaJGiKJH1NKlqEHPnwNCqjSiTbQZNoBm1clCPTijW0igWO0fl7l0pJHT\/0D5xjW4J3Kto3A7","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":39,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8RW8AAEARD6DAqAFNW2wIAW32AhUAaNMBL+Sfp2xOtDPLzYKhu+piHqe73dOumPLfJSdMeZS1DsQW6\/hpCy8DOSZ7DyJs7Ou9HareSiWgXLBcZQvsdeLiTxpSTnmqV00WHGguWFKWyWVfRY5Nx7kBKf\/Jn6IzDsNR","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0497{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Kg0AAEARJv7AqAFNW2wMBW32AhkAaP5XL+Sfp2xOtDPLzYKhu+piHgOPiMlXEBH2Hm1OwlollyXlXhdwNFoH5U9G2VbG56siGfNC0d6DOY5noCYiaS78b6rXrnvPapdco2WKUjZjtmLHsD28hLkB7vvp1+GNtLLV","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0504{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8zP4AAEARgA7AqAFNW2wQA232AhkAaNTdL+Sfp2xOtDPLzYKhu+piHsUuBWMC3GKDwrJX6QsLdT9bHWj2yfFabeAAKvc9LJ3OBd0PIi\/vNQOCvCfffF+w57IIQhfbo6rZc\/7BnirgSzJ3729rb2DhCvep\/\/qS\/Fx\/","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0447{"flow_id":39,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMhDZAADMRnghbbAgBwKgBTQIVbfYAOAOvL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KC5AADQR9NxbbAwFwKgBTQIZbfYAaG2iL+Sfp2xOtDPLzYKhu+piHo8sLmkfrl7ji8ssTNFVgOu4z55A7VzRPGaC4f3WPJRB+PPJR\/h2MvptMcTb12DbgdkLkQDMOj1teznsqjcYqTqUMAh3Ke98TkeErPX++8dy","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8uZlAADQRY3NbbAwDwKgBTQISbfYAaH\/0L+Sfp2xOtDPLzYKhu+piHjIfwpIL1wKLcHzMYh+xoWcLsHQ2lNoRZgVdXUWqa0KaBEwz3aqWqDTebpLtJAJF+biB0KnkIqPYfC+XX4EQfRvbeaBppw3Er7lYgo\/OOZdp","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":39,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8hENAADMRnctbbAgBwKgBTQIVbfYAaAGZL+Sfp2xOtDPLzYKhu+piHiEMfUFe+PMxqcIiZWMmkTlf1fxdqrIfyW9N0QHJdcQxlwnAG8yV\/9Q+Hh7zEhjjQd7Ex4oukZaHug+MKkJKEEMG3PUbPus5GwLWuLUlWZbc","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8Tn1AADYRyI9bbBADwKgBTQIZbfYAaFwUL+Sfp2xOtDPLzYKhu+piHmPDqdoeLJkU1AYttaYLE0PH1SpH5oL3Hj1+9PFZKklvc94hUkGqJh2QP\/diwnAtNtpfSv2OLF+gZFdcU1IpvwmlN6EFmXAK18VdX06vx2wb","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcuZpAADQRY5JbbAwDwKgBTQISbfYASGqAL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeSA8C1Fdbg3wAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcKDRAADQR9PZbbAwFwKgBTQIZbfYASI9wL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJebOnF7Nnk9AYAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0499{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8diVAADYRoOlbbBABwKgBTQIRbfYAaATwL+Sfp2xOtDPLzYKhu+piHqThFshYnXPLBqfhUcsaXL5Ghw5ksQ5e9GmM63l9zee9+3bwzkUUVhUaXEwpXmbmbPdSuU\/FAVhmII4RufSvgUlQYaM7XjQdDFzZ2KMF5fWF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0610{"flow_id":39,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMhElAADMRnXVbbAgBwKgBTQIVbfYAuH0KL+Sfp2xOtDPLzYKhu+piHixNygcB4b4oKSFHhrapF8CbNkqeqk6L1snNgqZ8koHpvhePCrDDjTmwRkiYvVtkCNrclG5doj1B7ykgw32SFoSnxp\/umzNR+6NcVPUD8wpVRe8W9tXH2pcdBUM6tie5qHXlIliS\/0V+A0XAn8Oo09n\/brGsdtVr5gtEgu+hcsVWk6HklB0gzfF4OrlkLxxrDR+JWfhtezmMFx\/HYfikSwU=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcTn5AADYRyK5bbBADwKgBTQIZbfYASA7XL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJedwyTHFV7HbkAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0447{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMKDhAADQR9QJbbAwFwKgBTQIZbfYAOP+mL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0475{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcditAADYRoQNbbBABwKgBTQIRbfYASE0OL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJet+9bvpcAlIEAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14} +0447{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMuaFAADQRY5tbbAwDwKgBTQISbfYAOP+vL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0447{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMToZAADYRyLZbbBADwKgBTQIZbfYAOPuoL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0447{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMdi1AADYRoRFbbBABwKgBTQIRbfYAOPuyL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0607{"flow_id":39,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMhFlAADMRnWVbbAgBwKgBTQIVbfYAuIVAL+Sfp2xOtDPLzYKhu+piHoYrCrVn58DKuKQgFCEZxi1S56PaW8g48ILriQrfDxO7q+e8I8hsLteA3M+FKIknbVFzjGlGDmYwNQXcrpIvgqCL9ZcBEAkxtwUXpMCCPPdvmlVu3VGEqVon9QYJR823nJY04Sl5gUCtDLqeW54nZFid0aAYpSVo2TXskO4cun1kg\/uCOWjOBuXoPD0jXKT96d3kNIeWnmU9iQU7taufGP8=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14} +0607{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":216,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKuMQAAAERTm\/AqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEq\/IAAEARoVTAqAFNW2wQAW32AhEAMFFHL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8Y1ONYmQEgKA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":38,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAiEAAEARTyTAqAFNW2wMA232AhIAMMOyL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/V94km42MEZg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0443{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE2BEAAEAReTHAqAFNW2wMBW32AhkAMBHuL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+qO5MANI6G2Q==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0444{"flow_id":41,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEChcAAEARQy7AqAFNW2wQA232AhkAMMaxL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9K9sn\/VbHVOg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8GPcAAEARNBjAqAFNW2wQAW32AhEAaK6iL+Sfp2xOtDPLzYKhu+piHh2PbidyD9Pf1O+T+Z562PeR1DtGIsW0mqS9ri+KmdH4ghXfG88DFq4A8OotXX1tX6WY99wWbtl9XZn6xLMw9PSQkMuYpY8Cv+H2cjkPb120","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0501{"flow_id":38,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8l\/0AAEARuQ\/AqAFNW2wMA232AhIAaBYjL+Sfp2xOtDPLzYKhu+piHsUUdzWSq1JnQgHuwL5ZzFMZZUBkOgRAnQ06mV54nHJajHrw7JhJwP3pu854HgpQ8PBvE4mqy42\/yBfG6DvXpdhYfDWpcRMy5Iccl3fM9+eE","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8soYAAEARnoTAqAFNW2wMBW32AhkAaK6EL+Sfp2xOtDPLzYKhu+piHpNqf0EGr3ouAM5o5Ho9IqKddcI\/Z\/b49j1yM7XDT90BJismgiRZXHF2EATHEoy8Lfiy7GCHIU14gsQujHjWVVo1d9xKDk2YVJGvI62nEIlc","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0498{"flow_id":41,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB87a4AAEARX17AqAFNW2wQA232AhkAaI81L+Sfp2xOtDPLzYKhu+piHgzmMNcDOZ2PoiHjW2yYnS6ePj1BGRdJoM8nFXnzaBh75yJzDzYLzBbUH1ZxWuxSCc8tLVzq402LbPVjqpmjcVElk5pqYd5uYnj2wmDnoeHG","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1588779639103,"flow_last_seen":1588779639103,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":28150,"dst_port":59772,"l4_proto":"udp"} +0478{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":122,"pkt":"EBMx8Tl2KDc3AG3ICABFAABsKQMAAEARarrAqAFNVwvNw2326XwAWFNj2ajstQcU9VmrWsN2RmlsiodFzsmW0mXr5Gv8o0f2aR9YWQKIE34PAz\/0T4VwEA0DXBRrws2ycCoPovMV6p5YsfJULcJS2cwqBKkU3Xys+SQ=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KINAADQR9IdbbAwFwKgBTQIZbfYAaHLEL+Sfp2xOtDPLzYKhu+piHuRszQ41FbqXYbZZXAVFrGnz5aD6BIy2wA8WvWucaYHtk\/B8UWoe98wisy7vNTjdhvmyB6Y3Dlp4+tSorsm+9d+JCobletUdU3L\/e04ZzdCo","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0500{"flow_id":38,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8ugZAADQRYwZbbAwDwKgBTQISbfYAaKtUL+Sfp2xOtDPLzYKhu+piHrTHFdAFs\/SBIX5Iprv7doYCM0HACNVv0QlFf11rJbUDaIETC76BFd1FamkhtAFe0ooVzY\/LfUHdb+DFFh5kJjNqEmRDzDoNYGDvpKOPyWnW","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0505{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8dmtAADYRoKNbbBABwKgBTQIRbfYAaFLeL+Sfp2xOtDPLzYKhu+piHlscntLRwoT3m1vJ\/doOEVvFUn\/+8frV46loAzRNGpVujhcnwTinUiHLcNG1\/K\/I\/bmsFhT6re8Lpl3\/xHBr3aApF0Ou1qQ9HrHg\/1stgsQm","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14} +0606{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":216,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKAckAAAERBWvAqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14} +0433{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779640,"pkt_len":90,"pkt":"EBMx8Tl2KDc3AG3ICABFAABMml0AAEAR+X\/AqAFNVwvNw2326XwAOMsSsmK\/vWlJHJOqyuLBG8kWaad6RX1I27GljGkLPfHdr93dNQ8yPA7ggZLrS4Zn185b","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0607{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779640,"pkt_len":216,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKXAQAAAERqy\/AqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14} +0433{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779641,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABEbZMAAEARiJHAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0755{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779641,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJ5AAEARYHPAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGANQMhaoAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0743{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779642,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEymIIAAP8Rnk\/AqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0505{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779643,"pkt_len":142,"pkt":"AQBeAAD7wJrQLWJ0CABFAACAWI0AAP8RwAbAqAE14AAA+xTpFOkAbI7lAAAAAAABAAEAAAABDF9zbGVlcC1wcm94eQRfdWRwBWxvY2FsAAAMAAHADAAMAAEAABFtABIPNTAtMzUtMTAtNzAuMSAxwAwAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14} +0534{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779643,"pkt_len":162,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAGwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsLTwAAAAAAAEAAQAAAAEMX3NsZWVwLXByb3h5BF91ZHAFbG9jYWwAAAwAAcAMAAwAAQAAEW0AEg81MC0zNS0xMC03MC4xIDHADAAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14} +0427{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":87,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJNSEAAAER4arAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14} +0785{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTiPpAAAERTLfAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14} +0434{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABEsxIAAEARQxLAqAE1wKgB\/+EV4RUAMB\/7U3BvdFVkcDCyd4qJW50BwwABAABMUeIxMdBB4jsY0JrM5ZhQFz1Lqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1588779645381,"flow_last_seen":1588779645381,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp"} +0543{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACa3qgAAAERKNPAqAE17\/\/\/+sYKB2wAhlIKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14} +0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1588779645381,"flow_last_seen":1588779645381,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}} +0454{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZEhgAAAIRA6TAqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14} +0742{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779646,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyaYkAAP8RzUjAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0756{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779646,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJ9AAEARYHLAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAHA28acAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0455{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779646,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZib4AAAIRi\/3AqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14} +0434{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779647,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABExqMAAEARL4HAqAE1wKgB\/+EV4RUAMB\/7U3BvdFVkcDCyd4qJW50BwwABAABMUeIxMdBB4jsY0JrM5ZhQFz1Lqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0543{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779647,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACaUgcAAAERtXTAqAE17\/\/\/+sYKB2wAhlIKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14} +0429{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779647,"pkt_len":87,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJgtEAAAERk\/rAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14} +0785{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779647,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTigFAAAERS7DAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14} +0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1588779648840,"flow_last_seen":1588779648840,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":56384,"dst_port":1900,"l4_proto":"udp"} +0544{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779648,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACaCVUAAAER\/ibAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14} +0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1588779648840,"flow_last_seen":1588779648840,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":56384,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}} +0428{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779648,"pkt_len":87,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJAsIAAAERFArAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14} +0785{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779648,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTiqZAAAERSwvAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14} +0434{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779649,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABElPEAAEARYTPAqAE1wKgB\/+EV4RUAMJohU3BvdFVkcDD0Jfgh9tR1aAABAAC\/vOrzE8GBHXmaYexmJHVX5sZgYw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14} +0454{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779649,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZzgYAAAIRR7XAqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14} +0742{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779649,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEycgkAAP8RxMjAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0432{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":90,"pkt":"EBMx8Tl2KDc3AG3ICABFAABM8zMAAEARoKnAqAFNVwvNw2326XwAOBQNt7NLZEiPyb9nJ25aFShQjjbK9tSAqF2RZJuCl4MIgiF4TeaDrkRovC99CpyADzRp","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14} +0454{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZgjsAAAIRk4DAqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1588779650651,"flow_last_seen":1588779650651,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp"} +0420{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":81,"pkt":"EBMx8Tl2KDc3AG3ICABFAABD6GYAAP8RT6TAqAFNwKgBAeT3ADUAL99XO7EBAAABAAAAAAAACXRlbGVtZXRyeQdkcm9wYm94A2NvbQAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14} +0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1588779650651,"flow_last_seen":1588779650651,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"telemetry.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1588779650652,"flow_last_seen":1588779650652,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp"} +0428{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":85,"pkt":"EBMx8Tl2KDc3AG3ICABFAABHeaUAAP8RvmHAqAFNwKgBAcF9ADUAM+X9HKUBAAABAAAAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14} +0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1588779650652,"flow_last_seen":1588779650652,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}} +0450{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":101,"pkt":"KDc3AG3IEBMx8Tl2CABFAABXLE1AADkRkarAqAEBwKgBTQA1wX0AQwAAHKWBgAABAAEAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAcABFx69t8=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14} +0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1588779650652,"flow_last_seen":1588779650666,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.246.223"}} +0478{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":123,"pkt":"KDc3AG3IEBMx8Tl2CABFAABtxO5AADkR+PLAqAEBwKgBTQA15PcAWQAAO7GBgAABAAIAAAAACXRlbGVtZXRyeQdkcm9wYm94A2NvbQAAAQABwAwABQABAAAAcAAOCXRlbGVtZXRyeQF2wBbAMwABAAEAAAA8AASifRMJ","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14} +0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1588779650651,"flow_last_seen":1588779650681,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":47,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"telemetry.dropbox.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"162.125.19.9"}} +0543{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACaJ+EAAAER35rAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14} +0786{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTivJAAAERSr\/AqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14} +0756{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779651,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGKBAAEARYHHAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAJsQpYUAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14} +0543{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779652,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACajVgAAAEReiPAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14} +0785{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779652,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTjH1AAAERSTTAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14} +0743{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779653,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEy5oIAAP8RUE\/AqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14} +0543{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779654,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACa7R8AAAERGlzAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14} +0785{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779654,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTjhBAAAERR6HAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14} +0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1588779629044,"flow_last_seen":1588779629045,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":38,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp"} +0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1588779615019,"flow_last_seen":1588779615032,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp"} +0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1588779625981,"flow_last_seen":1588779625981,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":0,"flow_packet_id":12,"flow_first_seen":1588779596451,"flow_last_seen":1588779651446,"flow_tot_l4_data_len":3444,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"} +0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1588779601222,"flow_last_seen":1588779632305,"flow_tot_l4_data_len":944,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"} +0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":18,"flow_packet_id":123,"flow_first_seen":1588779616036,"flow_last_seen":1588779620617,"flow_tot_l4_data_len":22264,"flow_min_l4_data_len":40,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.7","src_port":23174,"dst_port":521,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":19,"flow_packet_id":21,"flow_first_seen":1588779616036,"flow_last_seen":1588779618928,"flow_tot_l4_data_len":1624,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":23174,"dst_port":523,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":20,"flow_packet_id":20,"flow_first_seen":1588779616036,"flow_last_seen":1588779619034,"flow_tot_l4_data_len":1520,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":23174,"dst_port":527,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":21,"flow_packet_id":21,"flow_first_seen":1588779616036,"flow_last_seen":1588779618946,"flow_tot_l4_data_len":1624,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.1","src_port":23174,"dst_port":536,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":23,"flow_packet_id":20,"flow_first_seen":1588779616036,"flow_last_seen":1588779619007,"flow_tot_l4_data_len":1520,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.4","src_port":23174,"dst_port":538,"l4_proto":"udp"} +0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":22,"flow_packet_id":20,"flow_first_seen":1588779616036,"flow_last_seen":1588779618748,"flow_tot_l4_data_len":1520,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":23174,"dst_port":538,"l4_proto":"udp"} +0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1588779619914,"flow_last_seen":1588779619916,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp"} +0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1588779615962,"flow_last_seen":1588779615962,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4dc:edec:5b0c:a661","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1588779601223,"flow_last_seen":1588779632305,"flow_tot_l4_data_len":944,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"} +0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":14,"flow_packet_id":3,"flow_first_seen":1588779611355,"flow_last_seen":1588779611657,"flow_tot_l4_data_len":399,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"239.255.255.250","src_port":57916,"dst_port":1900,"l4_proto":"udp"} +0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1588779600828,"flow_last_seen":1588779600842,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp"} +0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":29,"flow_packet_id":3,"flow_first_seen":1588779626394,"flow_last_seen":1588779626394,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1588779626393,"flow_last_seen":1588779626393,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.43","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"} +0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1588779650652,"flow_last_seen":1588779650666,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp"} +0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1588779603320,"flow_last_seen":1588779603320,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.53","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":6,"flow_packet_id":9,"flow_first_seen":1588779597291,"flow_last_seen":1588779653520,"flow_tot_l4_data_len":2574,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.75","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":4,"flow_packet_id":120,"flow_first_seen":1588779596708,"flow_last_seen":1588779655297,"flow_tot_l4_data_len":20763,"flow_min_l4_data_len":108,"flow_max_l4_data_len":435,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":3,"flow_packet_id":7,"flow_first_seen":1588779596465,"flow_last_seen":1588779654853,"flow_tot_l4_data_len":2233,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1588779615961,"flow_last_seen":1588779615961,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":18,"flow_first_seen":1588779596464,"flow_last_seen":1588779654853,"flow_tot_l4_data_len":1460,"flow_min_l4_data_len":53,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":43,"flow_packet_id":3,"flow_first_seen":1588779639103,"flow_last_seen":1588779650102,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":56,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":28150,"dst_port":59772,"l4_proto":"udp","ndpi": {"proto":"Unknown"}} +0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":43,"flow_packet_id":3,"flow_first_seen":1588779639103,"flow_last_seen":1588779650102,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":56,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":28150,"dst_port":59772,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1588779636498,"flow_last_seen":1588779636498,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"} +0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":13,"flow_packet_id":8,"flow_first_seen":1588779608134,"flow_last_seen":1588779649019,"flow_tot_l4_data_len":384,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"} +0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":42,"flow_packet_id":4,"flow_first_seen":1588779637830,"flow_last_seen":1588779640832,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"239.255.255.250","src_port":52127,"dst_port":1900,"l4_proto":"udp"} +0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1588779617174,"flow_last_seen":1588779618677,"flow_tot_l4_data_len":144,"flow_min_l4_data_len":56,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":23174,"dst_port":60723,"l4_proto":"udp"} +0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":34,"flow_packet_id":3,"flow_first_seen":1588779634764,"flow_last_seen":1588779634797,"flow_tot_l4_data_len":2752,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":917,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":50822,"dst_port":443,"l4_proto":"udp"} +0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1588779628757,"flow_last_seen":1588779628804,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":39,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp"} +0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1588779596464,"flow_last_seen":1588779598465,"flow_tot_l4_data_len":268,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":54306,"dst_port":1900,"l4_proto":"udp"} +0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":45,"flow_packet_id":4,"flow_first_seen":1588779648840,"flow_last_seen":1588779654853,"flow_tot_l4_data_len":536,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":56384,"dst_port":1900,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":37,"flow_packet_id":24,"flow_first_seen":1588779637543,"flow_last_seen":1588779651686,"flow_tot_l4_data_len":1840,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":28150,"dst_port":529,"l4_proto":"udp"} +0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":36,"flow_packet_id":298,"flow_first_seen":1588779637543,"flow_last_seen":1588779654458,"flow_tot_l4_data_len":57280,"flow_min_l4_data_len":40,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":192,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":28150,"dst_port":529,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":38,"flow_packet_id":24,"flow_first_seen":1588779637543,"flow_last_seen":1588779651659,"flow_tot_l4_data_len":1840,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.3","src_port":28150,"dst_port":530,"l4_proto":"udp"} +0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":39,"flow_packet_id":288,"flow_first_seen":1588779637543,"flow_last_seen":1588779654458,"flow_tot_l4_data_len":59616,"flow_min_l4_data_len":40,"flow_max_l4_data_len":296,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.1","src_port":28150,"dst_port":533,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":41,"flow_packet_id":25,"flow_first_seen":1588779637543,"flow_last_seen":1588779651680,"flow_tot_l4_data_len":1944,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.3","src_port":28150,"dst_port":537,"l4_proto":"udp"} +0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":40,"flow_packet_id":24,"flow_first_seen":1588779637543,"flow_last_seen":1588779651645,"flow_tot_l4_data_len":1840,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":28150,"dst_port":537,"l4_proto":"udp"} +0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1588779607374,"flow_last_seen":1588779607388,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":41,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp"} +0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":10,"flow_packet_id":5,"flow_first_seen":1588779603292,"flow_last_seen":1588779643386,"flow_tot_l4_data_len":675,"flow_min_l4_data_len":108,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":135,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::18a0:a412:8935:c01b","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1588779645381,"flow_last_seen":1588779647380,"flow_tot_l4_data_len":268,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp"} +0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1588779650651,"flow_last_seen":1588779650681,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":47,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp"} +0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":32,"flow_packet_id":3,"flow_first_seen":1588779629079,"flow_last_seen":1588779637572,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":49,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp"} +0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":24,"flow_packet_id":301,"flow_first_seen":1588779617174,"flow_last_seen":1588779629315,"flow_tot_l4_data_len":61960,"flow_min_l4_data_len":56,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.52","src_port":23174,"dst_port":31480,"l4_proto":"udp","ndpi": {"proto":"Unknown"}} +0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":24,"flow_packet_id":301,"flow_first_seen":1588779617174,"flow_last_seen":1588779629315,"flow_tot_l4_data_len":61960,"flow_min_l4_data_len":56,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.52","src_port":23174,"dst_port":31480,"l4_proto":"udp"} +0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":33,"flow_packet_id":3,"flow_first_seen":1588779634762,"flow_last_seen":1588779634795,"flow_tot_l4_data_len":2752,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":917,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":61974,"dst_port":443,"l4_proto":"udp"} +0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":5,"flow_packet_id":120,"flow_first_seen":1588779596708,"flow_last_seen":1588779655298,"flow_tot_l4_data_len":20763,"flow_min_l4_data_len":108,"flow_max_l4_data_len":435,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4ba:91a:7817:e318","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"} +0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap"} |